IT Governance, Risk & Compliance (GRC) Analyst, Luxembourg
Bridge Building S.A. (BBSA), the Luxembourg-regulated entity of Bridge, a Stripe company, is seeking an IT Governance, Risk & Compliance (GRC) Analyst to ensure compliance and resilience in a high-velocity global engineering environment. This role involves translating European regulatory requirements such as DORA and MiCA into tangible IT controls, overseeing third-party risks, and maintaining the integrity of the governance framework. The analyst will act as the primary support to the local Head of IT, ensuring that global engineering practices align with local regulatory requirements through periodic control testing and policy updates.
Key responsibilities include maintaining and evolving the IT Risk Register, driving the local implementation of the DORA framework, conducting ICT due diligence and risk assessments of critical vendors, overseeing the Identity & Access Governance strategy, and acting as the primary liaison for Internal Audit regarding IT topics. The role also encompasses monitoring compliance with GDPR/Data Privacy controls, coordinating Business Continuity and Disaster Recovery testing documentation, and overseeing the IT incident management process to ensure proper classification, reporting, and root cause analysis.
The ideal candidate will possess a Bachelor's or Master's degree in Information Systems, Cybersecurity, or Business Administration with a strong IT focus, and have 3–6 years of experience in IT Audit, IT Risk, GRC, or Information Security. Experience in regulated sectors such as Banking, Fintech, or Insurance, or in Big 4 Audit (IT Risk advisory) is highly preferred. A strong understanding of frameworks like ISO 27001, NIST, or COBIT is essential, along with technical literacy in cloud fundamentals (AWS), SaaS models, and modern infrastructure. The candidate should have a risk mindset, excellent communication skills, and be fluent in English, with French being an asset. A pragmatic, resilient, and curious mindset, with a genuine interest in crypto-assets, blockchain, and the future of payments, is also desirable.