Chief Information Officer (CIO) | Luxembourg (Banking industry) Greater Luxembourg Area

¡Welcome to knowmad mood!

We are partnering with a leading banking institution to identify an outstanding Chief Information Officer (CIO) to join its leadership team in Luxembourg.

This is a strategic leadership role for a senior technology executive with extensive experience in financial services. The position reports to the Country General Management team and works closely with senior stakeholders to drive technology strategy, operational excellence and digital transformation initiatives across the organisation.

IMPORTANT: The candidate must have residency in Luxembourg

Your Mission

As CIO, you will be responsible for defining and executing the bank's technology roadmap, ensuring that IT capabilities support business growth, regulatory requirements and operational efficiency within a highly demanding financial environment.

About the Role

Acting as the liaison with the Group Technology department and being part of the IT organisation in a matrix reporting structure.

Responsibilities

Technology governance

Define, maintain and continuously strengthen the local technology governance framework.

Ensure alignment between technology priorities, business objectives and the Bank’s risk appetite.

Establish appropriate governance forums, management information, key performance indicators and key risk indicators.

Oversee technology service delivery and monitor performance, availability, capacity and control effectiveness.

CSSF regulatory oversight

Act as a key point of coordination for technology-related matters involving the Commission de Surveillance du Secteur Financier (CSSF).

Ensure that local technology governance and controls remain aligned with applicable CSSF requirements and supervisory expectations.

Coordinate responses, evidence and remediation activities arising from regulatory requests, inspections or reviews.

Prepare clear technology risk and control reporting for local management and relevant governance bodies.

ICT risk management

Own and coordinate the local ICT risk management framework and its integration into the wider enterprise risk framework.

Identify, assess, monitor and report ICT risks, control weaknesses and remediation plans.

Ensure that technology risks are clearly communicated to senior management and relevant governance bodies.

Coordinate technology-related internal and external audits and follow up agreed corrective actions.

DORA compliance and digital operational resilience

Lead the local implementation and ongoing maintenance of the requirements derived from the Digital Operational Resilience Act (DORA).

Oversee ICT incident management, classification, escalation and regulatory reporting processes.

Coordinate digital operational resilience testing, business continuity and disaster recovery exercises.

Ensure appropriate governance for ICT third-party risk, contractual requirements, information registers and exit strategies.

Monitor resilience metrics, vulnerabilities, dependencies and remediation plans across critical or important functions.

Stakeholder and team leadership

Partner closely with Business, Operations, Risk, Compliance, Internal Audit and Group Technology teams.

Provide concise and decision-oriented reporting to senior management and governance committees.

Lead, coordinate and develop the local technology function and promote a strong risk and control culture.

Support strategic technology, transformation and regulatory initiatives.

Candidate profile

Professional experience

+5 years of relevant experience in technology management, technology governance and ICT

Experience within banking and financial services.

Demonstrated exposure to regulatory requirements, supervisory reviews, audits or control functions.

Experience overseeing outsourced ICT services, cloud arrangements and technology vendors.

Ability to translate complex technology and risk matters into clear business and management information.

Knowledge and expertise

CSSF technology-related requirements and Luxembourg regulatory environment

Education and certifications

University degree in Information Technology, Engineering, Computer Science, Risk Management or a related discipline.

rofessional certifications such as CRISC, CISA, CGEIT, CISSP, ITIL or ISO 27001 are valued.

Languages

English Fluent. Mandatory.

Spanish Highly valued

French Valued but not required

To stay up to date with our latest news, follow us here → knowmad mood

At knowmad mood, we are committed to equal opportunities and respect for diversity. We apply our Equality Plan and the principle of non-discrimination in all our recruitment processes.