Regulatory careers › CSSF
Internal IT Auditor (m/f)
CSSF · Luxembourg · Permanent
- Employer
- Commission de Surveillance du Secteur Financier
- Division
- Internal Audit
- Location
- Luxembourg
- Contract
- Permanent
- Grade
- grade 12
- Level
- unspecified
- Reference
- AI-AUD-INT-IT-06
Prepare for the interview
Before the interview, read these RegReportingDesk articles to get up to date on what the CSSF is working on. You will walk in with a clear view of what the work involves and of the regulatory developments the panel may raise.
- Luxembourg Sanctions Risk Assessment: Screening Gaps the CSSF Flagged (2026-09)
- CSSF de-risking communique: managing ML/FT risk instead of avoiding it, what Luxembourg-regulated firms must address in their AML/CFT frameworks (2026-06)
- CSSF AI Communique: Mapping Frontier Cyber Risk to DORA (2026-07)
- Directive 2024/825 in Luxembourg: The 27 September Greenwashing Rules (2026-09)
The posting
As published by the Commission de Surveillance du Secteur Financier. Source: careers.cssf.lu. Reproduced for reference. The regulator’s portal is authoritative and the only place to apply.
Role & responsibilities
- Lead internal audit missions in the IT and information security field, and participate in audit engagements coordinated at European level in the context of our competences as national authority (NCA):
- Identify risks linked to information systems of the CSSF and ensure that mitigation measures are in place
- Perform independently audits on IT projects, on computer applications and information systems security
- Provide reasonable assurance on the risk control measures
- Analyze and assess audited processes and provide concrete suggestions to improve their efficiency
- Draft audit reports
- Ensure follow-up of audit recommendations
- Provide with the necessary IT support for the preparation and execution of audit missions in all CSSF’s activities. Ideally, the candidate will be required to participate and carry out business audits
Your profile
- Four or five-year master’s degree in computer science, an additional degree in relation to information system audit is an asset
- Proven professional experience of minimum 2 years as Information System Auditor
- CISA certification will be considered as a strong asset
- Excellent knowledge of internal audit methodology and of best practices in information technology
- Excellent knowledge of IT processes and risks
- Interest in new technologies (cloud computing, virtual currencies, artificial intelligence, open banking, etc.)
- Knowledge of the financial sector is an advantage
- Excellent writing, analytical, synthesis and communication to top management skills
- Rigor, precision, confidentiality qualities
- Ability to work independently
- Full professional proficiency in written and spoken French and English. German and/or Luxemburgish will be considered an advantage
Indemnity Group
The position is classified in salary group A1 in accordance with the remuneration scheme applicable to Luxembourg State employees.
The initial career classification starts from step 3, at grade 12 for recruitment in salary group A1.
The successful candidate (m/f) will be hired as public employee (“employé de l’Etat”) under a permanent contract. If the candidate meets the required conditions, s/he will be asked to apply for admission to the status of civil servant (“fonctionnaire de l’Etat”).
Prior to the conclusion of the contract, the candidate must submit an extract from the criminal record (bulletin n°3), dated less than 2 months, in order to prove their conduct and integrity.
Apply now
* Required fields
Job reference *
Title *
First name *
Last name *
Date of Birth *
Nationality *
The current legal framework for employment in the public sector requires all staff members to hold citizenship from an EU member state or from Switzerland. Candidates with other nationalities cannot be considered.
Phone *
E-mail *
Are you looking for a full-time or part-time position? *
Where did you see this job advert? *
Please specify *
Your resume *5MB max pdf
Your cover-letter *2MB max pdf
Your ID card *2MB max pdf, png, jpg, jpeg
Your Diploma *2MB max pdf, png, jpg, jpeg
For diplomas obtained outside of Luxembourg, Belgium or The Netherlands, we additionally require proof of their equivalence with national standards. While you may send your application without it, we encourage you to request this straight away in order to avoid delays later on in our recruitment process.
Additional details can be obtained from the Ministère de l’Enseignement Supérieur et de la Recherche for university level degrees, on guichet.public.lu for A-level (BAC) diplomas or equivalent qualifications, or on guichet.public.lu for Vocational skills certificate (CATP), vocational aptitude diploma (DAP), master craftsman’s certificate (brevet de maîtrise).
Additional document2MB max pdf, png, jpg, jpeg
Ex. : recommendations …
By ticking this box, you acknowledge that you have read and accepted our Job Applicant Privacy Notice *
