IT Security Manager - Identity and Access Management (M/F/D)

Join a leading Luxembourg services firm expanding to Porto as an IT Security Officer – IAM!

Your new Company:

Join one of Luxembourg’s leading professional services firms as it expands into Portugal’s Porto region with a brand‑new Office!

The company is recognized for delivering high‑quality legal, tax, regulatory consulting and operational services to financial institutions, corporates, and investors, offering end‑to‑end support across the full business lifecycle.

This expansion into Portugal represents a unique opportunity to join a dynamic, multicultural environment that blends international exposure with local growth, offering room to develop your skills and impact clients worldwide!

Your new Role:

As an IT Security Manager – IAM, your role will focus on supporting the implementation, maintenance, and continuous improvement of Identity and Access Management processes and controls across a hybrid IT environment, ensuring secure, compliant, and well-governed access management across on-premises, cloud, and SaaS platforms.

Your responsibilities will include:

• Support the implementation, maintenance, and continuous improvement of IAM processes and controls across a hybrid IT environment, in line with regulatory requirements such as DORA, GDPR, and ISO 27001.
• Ensure proper execution of Joiner, Mover, and Leaver processes, including user provisioning, modification, and deprovisioning.
• Review and monitor user access rights, privileged accounts, and generic accounts in accordance with security and compliance policies.
• Support and execute periodic access reviews and segregation of duties controls.
• Contribute to the definition, documentation, and enforcement of IAM policies, standards, and procedures.
• Support internal and external audits by preparing access control evidence and tracking remediation actions.
• Collaborate with IT, Security, and business stakeholders to ensure secure and compliant access management.
• Support the implementation and administration of authentication and authorization controls such as MFA, SSO, Conditional Access, RBAC, and PAM.
• Monitor compliance with IAM-related controls and regulatory requirements, ensuring traceability and control effectiveness.
• Contribute to awareness initiatives related to access management, data protection, and security policies.
• Support the operational oversight of SOC activities, including security event monitoring, log management, alert follow-up, remediation coordination, and incident tracking with relevant stakeholders.
• Coordinate hybrid operational activities involving internal teams and external providers, ensuring service continuity, incident follow-up, escalation management, and compliance with security requirements.
• Ensure effective collaboration between internal stakeholders, managed service providers, SOC partners, and infrastructure teams to maintain operational efficiency and security continuity.

What you will need to be successful:

• 2 to 5 years’ professional experience in IT Security, IAM, or Cybersecurity, ideally in a regulated environment.
• Degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Good understanding of IAM principles, including Joiner, Mover and Leaver processes, access reviews, segregation of duties, and privileged account management.
• Experience supporting audits, access control reviews, and remediation follow-up.
• Good understanding of IT security frameworks and regulatory requirements, including DORA, ISO 27001, and GDPR.
• Familiarity with authentication and authorization mechanisms, including MFA, SSO, Conditional Access, RBAC, and PAM.
• Familiarity with directory services and IAM tools, such as Active Directory, Microsoft Entra ID, or IAM/IGA solutions.
• Experience with ticketing and documentation tools, such as Jira, Confluence, or ServiceNow.
• Exposure to SOC environments, log monitoring, SIEM platforms, security event analysis, or centralized logging tools is considered a strong advantage.
• Ability to work in hybrid operational environments involving internal teams and external service providers during transition or transformation phases.
• Strong analytical skills, attention to detail, and a structured, reliable working approach.
• Fluent in English, both written and spoken. French is a plus.

What the company can offer you:

• Competitive benefits package;
• Hybrid work;
• Learning & Development opportunities;
• Opportunity to join a dynamic, multicultural environment, growing its business in Portugal.