IT Risk and Cyber Security Officer

About the role

The IT Risk and Cyber Security Officer will join the Chief Information Security Officer (CISO) Territory team, acting as the bridge between regional CIB CISOs and subject‑matter experts. The role ensures the consistent deployment of cyber security requirements across the Europe, Middle East and Africa (EMEA) region.

Key responsibilities

• Participate in updating and establishing Cyber Security and IT Risk Service‑Level Agreements (SLAs) across regional and local entities.
• Monitor cyber security posture of CIB users hosted by other entities in the EMEA region (CIB Inside).
• Support the rollout of the Cyber/IT Risk dashboard based on Key Risk Indicators (KRIs) and KPIs.
• Act as liaison between central teams and Territory CISOs to cascade guidelines, news, alerts, and to gather local inputs.
• Plan, organize and facilitate central EMEA and Territory committees and prepare local Cyber/IT Risk Committee meetings to meet regulatory requirements.

Required profile

• Bachelor’s degree in Information Technology, Computer Science or a related field.
• Up to 2 years of experience in IT or a similar environment.
• Advanced written and spoken English.
• ISO 27001 lead auditor or lead implementor certification.
• ISO 27005 risk management certification.

Required skills

• ISO 27001 lead auditor certification.
• ISO 27005 risk management certification.
• Proficiency with Microsoft Office tools (Excel, PowerPoint, Macros).
• Knowledge of cybersecurity risk frameworks and requirements.
• Understanding of global IT processes, assets and solutions.