Tasks and responsibilities:
- Responsible for the implementation and further development of the information security concept in the IT department and for harmonising the interfaces with the overall concept of the Group and the CISO
- Main responsibility for ensuring that the necessary organisational and technical measures relating to security in the specialist area are up-to-date at all times and continue to correspond to the necessary security level in the future. This includes the regular performance of penetration tests & analyses, tracking the mitigation of vulnerabilities and their documentation, the preparation of evidence and participation in audits
- Management of IT security-related projects
- Regular contact with customers, suppliers and cantonal authorities (NCSC), participation in customer meetings, answering customer enquiries, exchanging information on developments in the subject context (e.g.viewing media bulletins)
- Advising on security-related topics
Must-have criteria:
- Higher specialised training in computer science or business informatics (HF or FH in computer science or business informatics)
- Further training in information security (e.g. CAS, CISSP certification, MAS Information Security)
- Several years of practical experience in information security and IT security
- Project management experience
- You speak the language of systems engineers
- You are quick on the uptake, independent, precise and team-orientated
Nice-to-have criteria:
Language requirements:
- German (C1+)
- English (C1+)