For our department IT Security within General Services, we are looking for a (an):
Information Security Officer (m/f/x)
Description:
As Information Security Officer you will actively contribute to maintaining and strengthening Luxair group's information security posture.
Driven by a strong interest in cybersecurity, you will actively support the Head of IT Security in coordinating and implementing risk-based security measures, ensuring that policies, controls, and processes effectively protect the Group’s information assets and support all related activities of the IT department.
Responsibilities:
* Ensure effective security monitoring and incident response through analysis of security logs using the existing SIEM, working with the Managed SOC to validate alerts, minimize false positives, detect threats, and develop incident response playbooks for coordinated, timely actions
* Support the overall identity and access control management process, including Identity and Access Management (IAM), Privileged Access Management (PAM), and Identity Governance and Administration (IGA), ensuring proper user lifecycle management, access provisioning, privileged account protection. While promoting secure access practices across the organization
* Conduct risk and security assessments for internal and third-party solutions in line with established standards
* Contribute to the design, execution, and follow-up of vulnerability assessments, and penetration testing, ensuring timely remediation of identified weaknesses
* Contribute to the creation and maintain up-to-date baselines, secure configuration and system hardening activities with internal technical teams
* Develop and maintain information security policies, standards, and procedures, ensuring compliance with frameworks such as PCI-DSS, and supporting related audits and assessments
* Contribute to the information security awareness program
Education & skills
* Bachelor’s in computer science/information security or equivalent combination of education and experience that satisfy the requirements of the position
* Previous relevant experience in Information Security
* Have knowledge of enterprise security concepts: Zero Trust, Least Privileges, IAM, PAM, IGA, MFA, SSO, Secure by Design, Defense in Depth, SSDLC, Cryptography, etc.
* Hands on experience operating security solutions (e.g. vulnerability scanners, EDR, …)
* Hands on experience operating an Identity Governance and Administration (IGA) and Privileged access management (PAM) solution
* Good analytical skills with the ability to clearly explain and summarize ideas
* Excellent verbal, written and interpersonal communication skills in English
Desired or to be acquired criteria
* Knowledge of industry best practices, standards, frameworks and regulations (NIST CSF, ISO27001, ISO27005, GDPR, NIS2, PCI-DSS…)
* Hands on experience in IT infrastructure (e.g., Network, Unix, VMWare, Backups, Windows, …)
* Ability to collaborate with both technical and non-technical staff
* Strong passion and interest in information security
* Organized, proactive and customer-oriented
* Strong critical thinking and problem-solving skills
* Self-motivated individual and able to work methodically with minimal supervision
* Positive can-do attitude with a mature and professional approach
* Skills in French or other languages (spoken and written)
The ideal candidate :
* Knowledge of Luxemburgish or any other language is considered as asset