ICT Risk Officer

There are 8 billion people on this planet. And by 2050, there will be 2 billion more. Making sure there is enough food, fiber and infrastructure for our rapidly growing world is what we’re all about at John Deere. The company is one of the world's largest manufacturers of agricultural, forestry, construction, and gardening machinery. We are aware that the source of our success is in our very professional and diverse employees and their relationship with John Deere, with our products and prospects. That is why we are investing in our people and our technology like never before in our 180-year history. Here, the world’s brightest minds are tackling the world’s biggest challenges. RIGHT NOW.

Luxembourg is the European Headquarters for John Deere Financial. The primary activity is providing financial services to customers and dealers who want to finance John Deere equipment. John Deere Bank SA holds a full banking license and is regulated by the CSSF.

We are looking for an:

ICT RISK OFFICER

Luxembourg

The ICT risk officer reports directly to the Managing Director and acts as a key 2nd line of defense function for Information and Communication Technology (“ICT”) risks. The role is responsible for identifying, assessing, monitoring and reporting ICT‑related risks, and for advising the Authorized Management on Luxembourg regulatory requirements, material ICT risks, and the adequacy of risk mitigation measures.

Key Responsibilities:

• Maintain and continuously improve ICT risk management & control framework.

• Identify, assess, monitor and report on ICT risks.

• Challenge and support the 1st line of defense on ICT risk assessments, mitigation actions, and risk acceptance decisions.

• Regulatory compliance & advisory role in assigned areas of responsibility, including DORA compliance.

• Lead outsourcing & third‑party risk governance and oversight.

• Lead business continuity and disaster recovery planning and testing.

• Act as a Subject Matter Expert, as this role is an Individual Contributor role.

What It Takes:

• Master’s degree in one of the following areas: finance, business administration, economics, law and or IT.

• Minimum of 5 years in a similar position within a regulated environment.

• Strong knowledge of ICT risk management frameworks within regulated financial institutions.

• Sound knowledge of ICT to facilitate effective oversight and challenge to 1st line of defense.

• Demonstrated hands-on technical experience (which will be verified during the technical interview) in areas such as cloud technologies, cybersecurity, infrastructure, software development, or automation, with the ability to confidently engage in technical discussions and effectively challenge technical decisions and risk assessments when required.

• Solid understanding relevant regulation related to ICT risk management, outsourcing requirements, internal control systems, and governance expectations (incl. CSSF circular 12/552, 22/806, DORA).

• Ability to assess risks against the bank’s risk appetite, internal policies, and regulatory requirements.

• Experience in second‑line control functions (risk, compliance, internal control). Capacity to solve problems, identify options and propose innovative solutions, self-starter approach.

• Communication and advisory skills.

• Independence and professional judgement.

• Strong organizational and personal skills.

• Fluency in English. French being an asset.

What You’ll Get:

• Be part of a large multinational industry leader organization.

• A multicultural inclusive environment.

• Pension & life cover/income protection benefits.

• Flexible working solutions & Teleworking to balance family and career.

• Development and learning opportunities to support current needs and future aspirations.

Please attach an English version of your CV.

We look forward to your application! John Deere is an equal opportunity employer and believes in the power of diversity in the workforce. All qualified applicants will receive consideration for employment without regard to, among other things, race, religion, color, national origin, sex, age, sexual orientation, gender identity, or status as a qualified individual with disability.