Senior IT Risk & Security Governance Manager (80–100%)

For a demanding and business-critical IT environment at a leading Swiss company, we are looking for an experienced individual in the field of IT Risk Management, Security Governance and Compliance.

Senior IT Risk & Security Governance Manager (80–100%)

Job description:

• Consolidation, control and further development of the existing IT risk portfolio
• Implementation and moderation of risk analyses and risk reviews
• Assessment of technical and organizational risks as well as coordination of corresponding risk mitigation measures
• Control and coordination of security, compliance and governance topics
• Ensuring the structured tracking of identified risks and measures
• Creation of management reports, decision-making bases and status overviews
• Stakeholder management across various IT, security, operations and delivery teams
• Support of the Product Owner with governance, risk and security issues
• Continuous further development of existing risk and governance processes

About the customer:

In this senior function, you will take on a central role in managing risks within a complex application portfolio. You will work closely with Product Owners, IT Operations, DevOps, security and delivery teams and ensure that risks are assessed transparently, suitable measures are defined and consistently tracked.

The position is intended with a workload of 80–100% and offers the possibility for up to two home office days per week.

This is a temporary position with a duration of 12 months, with the option of extension.

Requirements:

• Several years of professional experience in the environment of IT Operations, IT Service Management, DevOps or comparable enterprise IT structures
• Sound experience in IT Risk Management as well as in the analysis and assessment of technical and organizational risks
• Very good knowledge of Information Security, Security Governance and Compliance
• Experience in performing risk reviews as well as in the tracking and control of risk mitigation measures
• Strong experience in stakeholder management across multiple teams and organizational units
• Ability to prepare complex technical and organizational facts in an understandable and management-oriented manner
• Experience with management reporting and the creation of decision-making bases
• Practical experience with Jira and Confluence
• Very good German skills as well as good English skills

Advantageous:

• Knowledge of ISO 27001, NIST, COBIT or comparable security and governance frameworks
• Experience with audit, compliance or regulatory requirements
• Experience in operating business-critical applications in cloud environments
• Understanding of modern operating models such as DevOps or Site Reliability Engineering (SRE)
• Experience in the governance of application or IT portfolios
• Certifications such as CISSP, CISM, CRISC or ITIL
• Experience in large enterprise organizations with complex stakeholder structures

j4id10403505a j4it0939a j4iy26a