Information Security Advisor

JOB DESCRIPTION

As a global critical financial infrastructure, we are putting in place the required controls to adequately and effectively protect Euroclear’s information and assets.

The Data Protection Services tribe protects Euroclear’s data assets from leak, loss or tampering by ensuring a clear view of all data, classified by business criticality and sensitivity, and applying corresponding controls defined, operated and monitored. The GRC Squad plays a central role by integrating governance, risk, and compliance across data protection services, ensuring alignment with the Group Data Policy, regulatory obligations (e.g. GDPR), and the Information Security Strategy.

The squad supports secure business transformation driven by cloud adoption, AI, and increased external collaboration, while ensuring consistent governance, risk modelling, and reporting across the data lifecycle.

As an Information Security Advisor in the GRC Squad, you will support the implementation and operation of governance, risk, and compliance controls that help protect Euroclear’s data throughout its lifecycle. You will translate regulatory, policy, and internal requirements into practical security and data protection measures, working closely with more experienced colleagues. You will support initiatives and projects by providing input from a risk and compliance perspective and helping ensure that risk‑based decision‑making is applied consistently.

• Support the definition and maintenance of governance, risk, and compliance requirements for data protection services in line with the Group Data Policy and Information Security Strategy and Standards.
• Scope, qualify, and support data protection initiatives and demands in collaboration with product owners, program managers, and project leaders.
• Review and challenge solution designs, integrations, and operating models from a data protection and risk perspective.
• Support audits and regulatory reviews by providing clear risk assessments, control evidence, and remediation follow‑up.
• Advise on data leakage prevention, encryption, anonymization, external file sharing, and Microsoft 365 data security governance.
• Partner with IT and business stakeholders to embed data protection by design and by default across initiatives.
• Contribute to continuous improvement of GRC processes, tooling, and automation within the squad.

• Bachelor’s or Master’s degree in IT, Computer Science, Engineering, or equivalent professional experience.
• Limited experience in information security, data protection, GRC, or related domains within complex IT environments.
• Foundational understanding of data security concepts such as data classification, DLP, encryption, anonymization, and access control.
• Initial exposure to cloud and collaboration platforms, such as Microsoft 365, with an interest in understanding their security and data protection capabilities.
• Ability to understand regulatory and policy requirements and contribute to translating them into practical, risk‑based security controls, with guidance from more senior colleagues.
• Good communication skills in English, with the ability to clearly explain ideas to both technical and non‑technical stakeholders.
• Strong analytical mindset, curiosity, and willingness to ask questions and learn.

• Exposure (academic, internship, or early professional) to data protection or security tools such as DLP solutions, email security, or external file‑sharing platforms.
• Initial familiarity with Microsoft Purview and/or Microsoft Defender, or a strong interest in developing skills in this area.
• Limited experience working in consulting, project‑based, or client‑facing environments.

• Early‑career or entry‑level cybersecurity certifications (or active preparation), such as SC‑900, ISO 27001 foundation, CRISC or similar.
• Familiarity with Agile ways of working or structured delivery environments.
• Ability to break down complex issues into manageable components and to appropriately escalate risks or uncertainties.
• Curious, solution‑oriented, and able to see the bigger picture while working on specific tasks.
• Strong…