Emplois Outsourcing (Luxembourg)

Your team

Your role

• Identify, assess, and monitor operational risks related to outsourcing, especially in IT and technology domains.
• Review, test, and maintain risk management frameworks and controls for outsourced activities, ensuring robust governance and vendor oversight.

• Ensure regulatory oversight and compliance for IT outsourcing arrangements (intra-group and third-party) for Luxembourg-based entities, including reviewing exit strategies, outsourcing risk assessments, contracts, and CSSF notifications for critical or important ICT outsourcing.
• Stay up to date with regulatory developments and best practices in outsourcing and IT risk management, including DORA and GDPR.

• Develop and present dashboards and reports to senior management and committees and contribute to the ongoing enhancement and maintenance of the outsourcing risk management framework, including alignment with regulatory requirements.
• Play a key role in leveraging technology, including AI and automation, to enhance the R&C framework of the organization.

• Act as an intermediary within the Pictet Group, engaging with various stakeholders to review and understand incidents, review and validate remediation solutions, and ensure that agreed actions satisfy all parties involved, follow through full resolution of remediation plans.
• Ensure the follow-up of recommendations issued by control functions such as internal audit, external audit, ISAE auditors, regulatory authorities, and compliance, by overseeing the implementation of corrective actions and adherence to deadlines.

• Collaborate with business units, senior management, and internal control functions to ensure alignment on risk management strategies and foster open communication on risk-related matters.
• Promote a strong risk culture at all levels of the organization by developing and delivering training and awareness initiatives focused on outsourcing risks, related controls, and individual responsibilities in outsourcing risk management.

Your profile

• Master's degree in Information Technology, Computer Science, Risk Management, or a related field.

• Minimum 5 years of experience in IT risk management, ideally within the financial sector or asset management
• Proven experience in IT risk management, outsourcing risk, or third-party risk management within the financial sector or a similar regulated environment

• Excellent communication and interpersonal skills, with the ability to effectively engage with stakeholders at all levels.
• Proven ability to work independently and collaboratively in a team environment.
• Strong organizational and time management skills, with the ability to prioritize and manage multiple tasks and deadlines.
• Initiative and ability to anticipate risks.
• Leadership, accountability influencing skills, and ability to promote a risk-aware culture.

• Strong understanding of IT processes, cybersecurity, and technology controls.
• Strong interest in new technologies, with a particular appetite for artificial intelligence (AI), automation, and digital transformation in Operations and Risk management.
• Strong knowledge of risk management frameworks, methodologies, and tools.
• Familiarity with relevant regulations (e.g, DORA, GDPR, 18/698 etc.) and industry standards.
• Proficiency in incident reporting and monitoring tools.

• Fluent in french and english.

Note

Diversity & Inclusion