About the job
Location: Luxembourg
On-Site | Full-time
Compensation: €180K - €250K
We are working with our client, a prominent international financial services provider in the digital asset sector, in search of a highly skilled Authorised Manager to join their senior management team in Luxembourg. This critical role focuses on overseeing Risk Management, Internal Control, and Information Security.
The ideal candidate will be responsible for designing, implementing, and ensuring the effectiveness of the firm’s risk management framework and ICT governance, adhering strictly to MiCA/MiFID regulations and relevant EU directives, including DORA. This senior leadership position demands a professional adept at balancing strategic decision-making with operational execution in an environment lacking a dedicated Risk or Information Security team. The Authorised Manager will guarantee sound and prudent business operations while coordinating across all functions, providing senior oversight to the Compliance function while respecting its operational independence.
Key Responsibilities
1. Authorised Management & Governance
- Serve as the Authorised Manager for regulatory bodies concerning all Risk, Internal Control, and Information Security matters.
- Ensure compliant operations in collaboration with senior management.
- Assist in defining the firm’s local strategy and development plans.
- Represent the organization in internal and external meetings with regulators, auditors, and global group functions.
2. Functional Oversight
- Hold overall senior management responsibility with functional oversight of Risk Management, Internal Control, IT/Information Security, HR, and Administration.
- Act as the senior management escalation point for the Head of Compliance, ensuring operational independence while aligning with the firm’s governance framework.
3. Risk Management & Internal Control
- Develop and enhance the risk management framework, including risk universe identification, appetite frameworks, and KRI reporting.
- Manage the full risk spectrum: Operational, ICT, Credit, Market/FX, Liquidity, and Reputational risk.
- Evaluate the internal control framework (both automated and manual) and ensure remediation of any identified weaknesses.
- Oversee outsourcing and third-party risk methodologies and ongoing monitoring.
4. Information Security & DORA Compliance
- Act as the senior accountable individual for ICT risk management and information security governance.