Authorised Manager - Risk & Information Security

Location: Luxembourg

On-Site | Full-time

Compensation: €180K - €250K

We are hiring on behalf of our client, a leading international financial services provider within the digital asset sector, the client is seeking a highly qualified Authorised Manager to join the senior management team in Luxembourg. This pivotal role is primarily responsible for the oversight of Risk Management, Internal Control, and Information Security.

The successful candidate will be accountable for the design, implementation, and effectiveness of the firm’s risk management framework and ICT governance in strict alignment with MiCA/MiFID requirements and applicable EU regulations, including DORA. This is a "hands-on" senior leadership position requiring a professional who can balance strategic decision-making with operational execution in an environment without a dedicated Risk or Information Security team. The Authorised Manager will ensure sound and prudent business operations while coordinating across all functions, including providing senior oversight to the Compliance function while respecting its operational independence.

Key Responsibilities

1. Authorised Management & Governance

• Act as the Authorised Manager vis-à-vis regulatory bodies for all Risk, Internal Control, and Information Security matters.
• Ensure compliant operations in coordination with other members of senior management.
• Contribute to the definition of the firm’s local strategy and development plans.
• Represent the organization in internal and external meetings with regulators, auditors, and global group functions.

2. Functional Oversight

• Hold overall senior management responsibility with functional oversight of Risk Management, Internal Control, IT/Information Security, HR, and Administration.
• Act as the senior management point of escalation for the Head of Compliance, ensuring the function remains operationally independent while aligned with the firm’s governance framework.

3. Risk Management & Internal Control

• Develop and enhance the risk management framework, including risk universe identification, appetite frameworks, and KRI reporting.
• Manage the full risk spectrum: Operational, ICT, Credit, Market/FX, Liquidity, and Reputational risk.
• Evaluate the internal control framework (automated and manual) and ensure remediation of any identified weaknesses.
• Oversee outsourcing and third-party risk methodologies and ongoing monitoring.

4. Information Security & DORA Compliance

• Serve as the senior accountable person for ICT risk management and information security governance.
• Define and review information security policies and incident management frameworks.
• Ensure full compliance with the DORA regulatory framework and other ICT-related obligations.
• Coordinate ICT-related regulatory reporting and audits in collaboration with Compliance.

• Education: University degree in Risk Management, Finance, Law, IT, or a related field. Professional qualifications (e.g., FRM) are considered an asset.
• Experience: Minimum of 5 years of experience in a senior Risk, Internal Control, or Compliance function within a regulated financial institution.
• Regulatory Knowledge: Deep understanding of MiFID and the DORA regulatory framework is essential.
• Technical Proficiency: Practical knowledge of information security, ICT risk, and a solid understanding of financial statements and capital/prudential considerations.
• Operational Profile: Proven ability to operate effectively in a "hands-on" capacity without a dedicated departmental team.
• Soft Skills: Strong judgment, independence of mind, and the ability to challenge stakeholders constructively.
• Languages: Fluency in English (written and oral) is required. Knowledge of Japanese or other European languages is a plus.
• Eligibility: Applicants must possess the right to work in Luxembourg. A criminal record check (Bulletin No. 3) will be required prior to hiring.

• Competitive base salary (€180K - €250K)
• Performance-based bonus scheme.
• The opportunity to hold a regulated senior management mandate within a dynamic and evolving industry.
• Exposure to an international and multicultural professional environment.

Interview Process

1. Initial Interview: Hiring Manager
2. Executive Interview: Founder / CEO
3. Final Round: Final Leadership Assessment
   
   
   
   

Due to the high volume of applications we anticipate, we regret that we are unable to provide individual feedback to all candidates. If you do not hear back from us within 4 weeks of your application, please assume that you have not been successful on this occasion. We genuinely appreciate your interest and wish you the best in your job search.

Commitment to Equality and Accessibility:

At MLabs, we are committed to offer equal opportunities to all candidates. We ensure no discrimination, accessible job adverts, and providing information in accessible formats. Our goal is to foster a diverse, inclusive workplace with equal opportunities for all. If you need any reasonable adjustments during any part of the hiring process or you would like to see the job-advert in an accessible format please let us know at the earliest opportunity by emailing [email protected].

MLabs Ltd collects and processes the personal information you provide such as your contact details, work history, resume, and other relevant data for recruitment purposes only. This information is managed securely in accordance with MLabs Ltd’s Privacy Policy and Information Security Policy, and in compliance with applicable data protection laws. Your data may be shared only with clients and trusted partners where necessary for recruitment purposes. You may request the deletion of your data or withdraw your consent at any time by contacting [email protected].