Senior Information Security Officer (w/m/d) Teilzeit/Vollzeit

Innovation meets strategy: At Group IT, you actively shape the IT future of the Helvetia Gruppe. Here, expertise and vision come together to continuously develop the IT strategy with the country markets and set a clear direction for the future. With a strong focus on pioneering technology solutions and innovations, we drive digitalization forward and create real added value for the entire Helvetia Baloise Gruppe. You are part of the IT Risk & Governance team in the IT Strategy & Steering department and work closely with various stakeholders within Group IT. The role focuses on governance-related control, accompaniment, and further development of information security in close cooperation with architecture, engineering, and operations areas. The operational operation of security tools and SOC services lies in specialized operations and security teams. What you achieve ## • You take on a central role in the further development and harmonization of information security within Group IT in a complex integration and transformation phase • You control information security in a risk-based manner in operational, project, and transformation environments and ensure transparency regarding security risks • You translate regulatory requirements, security standards, and internal guidelines into practical technical and organizational security measures and accompany their implementation • You identify, evaluate, and prioritize risks as well as security requirements and ensure their sustainable anchoring in operations • You work closely with Risk Management, Architecture, Engineering, Operations, Audit, as well as project and transformation teams • You support projects and operational areas in security, architecture, and compliance topics and ensure the appropriate consideration of security requirements in technical solutions • You develop security processes, standards, and controls further and drive their harmonization forward • You critically question existing processes, control systems, and organizational security structures and actively bring in improvement suggestions What you bring ## • Education or training in the field of Information Security or a completed degree in Computer Science, Information Technology, or a comparable field • Several years of experience as an Information Security Officer in complex enterprise, cloud, and hybrid IT environments • In-depth knowledge of relevant security standards and regulatory requirements (e.g., ISO 27001, NIST, GDPR, as well as FINMA regulations) • Experience with security assessments, risk assessments, and the implementation or review of security control systems in complex IT landscapes • Good knowledge of modern enterprise architectures, particularly in the areas of cloud, infrastructure, network, and Identity & Access Management • Certifications such as CISM, CISSP, or CCSP are an advantage • Very good German and English language skills as well as the ability to communicate with technical teams, management, and audit, risk, and compliance stakeholders in a target-group-specific manner • Analytical, pragmatic, and responsible personality with the ability to bring together different interests, actively accompany changes, and drive security topics in a risk-based manner