Authorised Manager (Risk & InfoSec)

Company Description

MTM Partners is an independent Management Consulting firm based in Luxembourg, dedicated to empowering organizations to achieve strategic growth. Specializing in project leadership, operational efficiency, change management, and recruitment, we offer tailored solutions to meet diverse client needs. Our expertise includes transformation programs, process digitalization, organizational reviews, and business scaling.

We are currently supporting a Fintech that requires the appointment of an interim Authorised Manager to join the Executive Committee. This strategic mandate focuses on leading the Risk Management framework and Information Security (InfoSec) strategy.

Operating under the "four-eyes" principle alongside the CEO, you will be the primary guarantor of the entity’s operational and technological resilience toward the CSSF. You will work in close partnership with the Head of Compliance to ensure a robust governance ecosystem.

Your Responsibilities (CSSF Mandate)

• Prudential Governance: Assume the role of Authorised Manager and act as the key point of contact for the CSSF on all Risk and ICT-related matters.
• Risk Management: Design, implement, and oversee the risk management framework
• InfoSec & ICT: Supervise the security of information systems in compliance with CSSF Circular 12/544 and the DORA regulation. Ensure the security of custody protocols (hot/cold storage) and blockchain infrastructure.
• Operational Resilience: Validate Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP) within a Cloud/Web3 environment.
• Regulatory Reporting: Oversee the preparation of the "Risk" and "Technology" sections of the annual reports submitted to the regulator.

Candidate Profile (Work Permit MANDATORY)

• Experience: Minimum 10 years in the financial sector, with a significant track record in senior management or control functions (Risk/CISO) within the Luxembourgish ecosystem.
• CSSF Approval: You meet the "Fit & Proper" criteria and have ideally already held an Authorised Manager or Key Function Holder position approved by the CSSF.
• VASP Expertise: In-depth understanding of virtual assets, blockchain technology, and the specific risks associated with crypto-custody.
• InfoSec: Expertise in Information Security, IT Risk Management, and Cybersecurity Frameworks
• Soft Skills: Strategic vision, absolute integrity, and the ability to thrive in a fast-paced, global Fintech environment.
• Languages: Fluent English is mandatory. Proficiency in French, German, or Luxembourgish is considered a strong asset.

If you are interested in this role and meet the above criteria, please send us your CV at [email protected]