IT and Cybersecurity Risk Manager

About the role

Euronext's Risk & Compliance department is looking for a proactive and structured IT and Cybersecurity Risk Manager to strengthen its capacity to identify, assess and monitor ICT and operational risk drivers, including geopolitical tensions, market dependencies, technological disruption, AI evolution and emerging cyber threats. The role sits in the ICT Risk team, which covers Data, IT, Cybersecurity, Business Continuity and Third-Party risk for the Group, and works with stakeholders across Euronext entities.

Key responsibilities

• Contribute to the Group ICT Risk Profile and support senior management oversight of digital and operational resilience, using cyber threat intelligence and analysis of geopolitical, physical and climate risks.
• Support the Digital Operational Resilience Strategy and the team's AI risk assessment work.
• Monitor the external risk environment, identify risk scenarios linked to cyber threats, AI and geopolitics, and coordinate with the Cyber Threat Intelligence team.
• Help define local ICT and operational risk profiles and support Group-level risk analyses.
• Assist in ICT asset risk assessments (criticality, exposure, dependency) and maintain risk registers and dashboards.
• Develop and refine ICT risk mitigation strategies, action plans, indicators, templates and reporting.
• Take part in change and project management, track action plans and share best practices.
• Build ICT risk awareness and training programmes.
• Review and challenge AI risk assessments done by business teams, contribute to the AI risk framework and take part in the AI Decision Committee.

Required profile

• Minimum 3 years of higher education in IT, cybersecurity or risk management, or equivalent experience.
• Fluent English (daily use); French is a plus.
• Strong analytical and problem-solving skills, autonomy and proactivity, and excellent written and verbal communication.

Required skills

• Entry-level knowledge of IT systems, cybersecurity concepts and risk management frameworks.
• Familiarity with ISO 27001, NIST and CIS standards.
• Understanding of financial regulation (MIFID, DORA, NIS 2) is a plus.