As one of the premier suppliers to our international banking client in Basel, Swisslinx are looking for a Security Specialist to work in a small and highly experienced Governance & Assurance Team on a contract basis starting ASAP, with the goal of implementing security standards and policies. This is a rolling 12 month contract running with option to extend up to five years starting ASAP. This would be an operational role running on going corporate security work-packages, also supporting various deliverables for projects. The team is made up of around 6 other members and they focus on review, create and update Security Policies and Standards following industry best practices. The Security Specialist will provide expert advice and operational experience on information security risk and control matters throughout the organisation. This includes: * Review of existing security standards, make recommendations as well as update the documents in line with best practice. * Conduct second line of defence compliance checks on the organization's information assets. * Support the maturing of the penetration testing strategy and support in scoping and engagement with third parties. * Review and advise on the security measures to protect the confidentiality, integrity and availability of the Bank's information assets and critical services. * Perform risk assessments and contribute to reviews of the assessment methodology. * Contribute to the implementation of industry-recognised key critical controls and contribute to the organisation's compliance mandate. * Support the team on technical security projects, in particular to develop and enhance the company's security policies and procedures. Participate in the gathering and analysis of information from security-related sources. In order to be considered for this role, you will possess the following skills and experience: * Solid experience in implementing industry-recognized frameworks and controls (e.g., NIST CSF, CIS, OWASP, SANS, etc...) * Certification in security-related disciplines and technologies would be an advantage (accreditation such as CISSP, CRISC, CISA, OSCP, PCI DSS) * Experience with documenting and communicating results that may be consumed by both developers and management-level audiences. * Security knowledge in operating system, application security, penetration testing and cloud technology. * Experience with Big 4 consulting firm (i.e KPMG, Deloitte, PWC, Accenture) would be a big plus * Experience with Security Policy and Standard creation * Fluency in English The following is nice to have: * TFS, SharePoint, DevOps * Azure Security Centre * Compliance monitoring tools * KRI/KPI development and monitoring Please note interviews would be conducted via video call, however the role is based 100% in Switzerland. Our client offers: * The opportunity to work in a diverse and international environment on a long-term basis * 50% working from home * 20 days working remotely from abroad per year * Modern office in central Basel (50 minutes direct train from Zurich) with subsidised canteen Are you interested to work in an international environment in one of the most important financial companies worldwide? Then apply now! We look forward to receiving your full application before the deadline on Tuesday 23 April.
By applying for this position, I consent to the Swisslinx Group of companies:
- storing my personal information (including name, contact details, Identification and CV information etc.) on their internal or external servers for the purpose of informing me of potential employment opportunities
- using my personal information or
- supplying it to third parties upon express consent for the purpose of informing me of potential job opportunities
- transferring where applicable my personal information to a country outside the EEA/EFTA
I also hereby agree to the Swisslinx privacy policy (http://www.swisslinx.com/en/legal/privacy-policy) and Terms of Use (http://www.swisslinx.com/en/legal/disclaimer)