ICT Risk Assurance Specialist (fmd)

Your area of work:

Clearstream is a leading international financial institution providing post-trade infrastructure and securities services to clients across global and domestic financial markets. As part of the ICT Risk Management Control Function you will play a key role in strengthening the organizations resilience against technology and information security risks.

Working closely with technology security product and risk stakeholders you will contribute to the identification assessment and mitigation of ICT risks while supporting the continuous enhancement of the organizations risk governance and control framework. This role offers a unique opportunity to combine technical expertise with risk assurance activities in a highly regulated financial market infrastructure environment.

Your responsibilities:

• Identify assess and support the remediation of material technology and information security risks across the organization.
• Analyze complex information security challenges and provide practical technical recommendations to mitigate identified risks.
• Conduct technical security reviews and contribute to the reporting of key risk exposures and mitigation activities.
• Evaluate the effectiveness of security controls and ensure they are appropriately designed implemented and operating as intended.
• Support risk and vulnerability assessments of existing and planned information systems to identify potential security weaknesses and protection requirements.
• Promote the consistent implementation of information security and regulatory compliance requirements across the organization.
• Collaborate closely with IT operations security and business stakeholders to drive informed and risk-based security decisions.
• Contribute to the continuous improvement of ICT risk management and assurance practices within a complex financial services environment.

Your profile:

• Masters degree in Computer Science Cybersecurity Information Security or a related technical discipline.
• Minimum 2 years of professional experience in security engineering information security audits or a comparable cybersecurity role.
• At least 1 year of experience within the financial services sector or another highly regulated environment.
• Strong understanding of information security principles technology risk management and security control frameworks.
• Ability to analyze complex IT environments identify risks and provide practical value-adding recommendations.
• Excellent communication skills with the ability to translate technical security risks into clear and actionable insights for diverse audiences.
• Proven ability to collaborate effectively across cross-functional and multicultural teams.
• Strong analytical mindset and willingness to develop a deep understanding of business processes IT operations and associated security controls.
• Experience with information security regulatory requirements compliance programs or risk management frameworks is considered an advantage.
• Professional proficiency in English and French; knowledge of German is a plus.