IT Security Manager

What you might be doing

• Own SwissBorg's IT setup
• Conduct regular internal IT audits to ensure compliance with industry standards such as ISO 27001 and GDPR
• Prepare audit reports and recommendations for improving the company’s IT systems
• Manage and maintain role-based access control (RBAC) across all digital platforms and data repositories based on the principle of least privilege
• Create, manage, and regularly review user groups and permissions based on departmental needs, project involvement, appropriateness and minimum necessary access
• Be involved in incident response activities for security breaches and unauthorized access
• Develop and deliver training programs on information security awareness for employees
• Work with external vendors and negotiate contracts for tools and services
• Work closely with the SRE, engineering and data teams to ensure proper securing and access control practices are put in place
• Ensure security compliance and complete 3rd party assessments and compliance requests

We would love to see the following experience :

• 3 years of experience working in a similar position, involving IT auditing and information security
• Familiarity with GDPR, PCI DSS and SOC2
• You should be highly proficient in auditing standards and frameworks, role-based access control, IAM tools, and SRE practices
• Given the sensitive nature of the role, keen attention to detail is required for reviewing system configurations, permissions, and compliance documents
• Excellent communication skills, both written and verbal
• A Bachelor’s degree in Information Technology, Computer Science, or a related field is required, with a Master’s degree being a strong plus