Information Security Manager

lux-Airport - Société de l'Aéroport de Luxembourg SA
Your next professional destination

Working for lux-Airport

Do you know Luxembourg airport as a passenger?
Would you like to join our team?

lux-Airport is the company that operates Luxembourg's national airport.
Its main roles are :

• Providing a safe, high-performance infrastructure for the air transport of passengers and goods
• Developing the surrounding areas in terms of activities and facilities.

Our airport has over 140 direct destinations served by 16 airlines.
In 2025, it welcomed some 5.3 million passengers.
Moreover, by handling 830,468 tonnes of freight in 2024, Luxembourg Airport ranks among the top freight hubs in Europe.

lux-Airport currently employs over 450 people from a wide range of backgrounds and nationalities.

The smooth running of our company relies first and foremost on the passion and excellence of our staff.
To continue to meet our commitments and move forward with new projects, we are constantly on the lookout for new talent.

Why joining us?

Working for lux-Airport means working in an exciting and stimulating environment.
It also means adopting a mindset that is respectful, committed, conscientious, solutions-oriented and optimistic.
In fact, we believe that this approach is the most effective way of fostering personal fulfillment.
It also creates a working environment where individuals can develop their full potential and expertise.
This perfectly reflects our "Just Culture".
Committed to diversity and inclusion, lux-Airport has signed the Lëtzebuerg Diversity Charter and ensures equal opportunities at every stage of the recruitment process.

Our job opportunity

Today, we are currently recruiting an Information Security Manager

Your responsibilities

*Your daily tasks

• Managing the Information & Cyber Security team, coordinating departmental activities, setting priorities, supporting employees' professional development and ensuring the achievement of departmental objectives.
• Defining, deploying and maintaining the Information Security Management System (ISMS) and its related policies, in alignment with the IT governance and compliance framework and subject to management approval.
• Leading the annual IT risk assessment exercise in coordination with the GRC function, coordinating relevant stakeholders and ensuring the maintenance and follow-up of the risk register through technical IT risk assessments and the provision of the necessary information to keep it up to date.
• Identifying, assessing and monitoring threats, vulnerabilities and risks that may impact information systems and digital services.
• Monitoring risk treatment plans and remediation actions, assessing their effectiveness and reporting on their progress.
• Leading the third-party and supplier risk management process, including pre-assessment of new suppliers, periodic reviews and follow-up of action plane.
• Contributing to AI governance activities, including the inventory, classification and assessment of AI use cases in accordance with regulatory and internal requirements.
• Maintaining the AI systems register and contributing to the assessment of their risk levels and associated control measures.
• Managing and overseeing the Security Operations Center (SOC) from both a managerial and operational perspective, defining objectives, supervising service providers, monitoring performance indicators and driving continuous service improvement.
• Overseeing the governance and management of the Cloud Access Security Broker (CASB) solution, supervising its usage, monitoring risks associated with cloud services and ensuring the enforcement of related security policies.
• Providing cybersecurity and risk management recommendations to reduce the organization's IT risk exposure.
• Contributing to internal and external audits and coordinating the collection of audit evidence within the scope of IT GRC.
• Providing cybersecurity expertise and guidance to ensure the appropriate level of security is implemented across IT projects, including Network, Infrastructure and Application projects.
• Ensuring IT reporting to the Head of IT.
• Developing and monitoring the IT security budget.
• Monitoring technological, regulatory and industry developments in cybersecurity, artificial intelligence and risk management.

*Your other missions

• Contributing to the onboarding and integration of new employees.
• Promoting environmentally responsible practices by ensuring proper waste sorting and energy conservation.
• Actively contributing to the development of a strong Safety and Security culture by identifying and reporting potential risks, hazards, events and incidents to help prevent their occurrence or recurrence, in accordance with the principles of Just Culture.

The required profile

Studies / training
Higher education degree (Engineering degree or master's degree) in Computer Science / IT, or equivalent professional experience in a similar role.

--

Experience

• At least 5 years of experience in a similar role.

--

Skills and knowledge required

*IT Tools
Mandatory:
Microsoft Office suite

*Languages
Mandatory:

• French: fluent spoken and written (C1 minimum)
• English: fluent spoken and written (C1 minimum)

Our offer

• A compensation based on a salary scale, plus fringe benefits
• A chance to work for a prestigious, stable and growing Luxembourg company with an international dimension.

Note regarding the recruitment process

• The whole application process is managed by Skeeled.
• Our recruitment team will contact you in case your profile matches to our needs.

Thank you in advance for your understanding.