Information Security Officer & IAM Governance Lead 80-100%

Shape information security with impact: As part of the CSO/CISO team, you ensure that IAM governance works in everyday life. You coordinate the central IAM governance committee, bring medicine, nursing, administration, and IT together, and create solutions that combine security and clinical agility. As an Information Security Officer, you also work on diverse topics of cyber and information security - from system evaluations and project consulting to assessments and the processing of inquiries. The Universitätsspital Zürich is one of the largest hospitals in Switzerland. Our over 8'600 employees and around 700 trainees are committed every day to the well-being of our patients. ### Your main tasks • Shape IAM governance: You are responsible for the further development and updating of IAM instructions and guidelines and ensure that these are practical, understandable, and in line with the CSO/CISO strategy. • Establish and lead the IAM governance committee: You bring medicine, nursing, administration, and IT together, moderate the dialogue, and ensure that decisions are made and different interests between operational requirements and security are merged in a solution-oriented manner. • Manage governance processes: You define scope, frequency, and quality requirements for central IAM governance processes such as role re-certifications and SoD checks and ensure their consistent implementation and monitoring. • Assess exceptions and risks: You evaluate exception requests, weigh security risks against operational requirements, and ensure traceable and audit-proof documentation of decisions. • Ensure IAM compliance: You ensure compliance with legal, regulatory, and internal requirements and support audits, reviews, and the processing of security incidents in the IAM environment. • Further develop IAM strategy: Together with the specialist departments and IT, you further develop the IAM strategy and translate it into understandable and binding specifications. Your profile • Education: Completed studies in (Business) Informatics, Law, or Economics, or a comparable qualification. Certifications in the governance and audit environment (e.g., CISA, CISM, CRISC, ISO 27001 Lead Auditor) are a plus. • IAM & Governance: Several years of experience in IAM governance processes and/or IAM audits as well as sound understanding of relevant IAM concepts such as Identity Lifecycle, role and authorization models, PAM, MFA, and SSO. • Professional experience: Experience in a steering or control function, for example as a Governance Manager, IT Auditor, or Risk Manager. • Way of working: Analytical, structured, and solution-oriented. You can prepare complex matters understandably and translate them into clear, traceable decisions. • Stakeholder Management: Confident in dealing with different stakeholder groups at professional and technical levels and enjoy bringing different perspectives together. • Language skills: Very good German and English skills. Our Benefits We look forward to your application Rahel Aggeler Recruiting About the USZ Das Universitätsspital Zürich ist eines der grössten Spitäler in der Schweiz. Unsere über 8'600 Mitarbeitenden und rund 700 Auszubildende setzen sich täglich für das Wohl unserer Patient:innen ein.