Head of Information Security

About the role

The Head of Information Security is responsible for the overall security posture of the organisation, shaping strategy, governance and risk management across all business units.

Key responsibilities

• Develop, maintain and continuously improve the Information Security Management System (ISMS) and internal control system (ICS) in line with business needs and regulatory requirements.
• Lead IT risk management, security operations, security testing and incident handling, and act as the central authority for audits, assurance and regulatory topics.
• Represent the organisation in customer interactions, RfPs and audits, and provide structured reporting to senior management.
• Manage vendor and third‑party security, advise IT teams on security processes and support security‑related architecture projects.

Required profile

• Higher professional education (HF, FH or university degree) in Computer Science, Business Informatics or a comparable field.
• Minimum 3 years of experience in an information‑security role or consulting within a regulated environment.
• Strong understanding of regulatory requirements such as FINMA Circular 2023/1.
• Excellent German (native preferred) and good English communication skills.

Required skills

• In‑depth knowledge of ISO 2700x series, BSI IT‑Grundschutz and NIST frameworks.
• Experience with audit and assurance standards, especially ISAE 3402.
• Familiarity with security metrics, reporting and risk‑based security solutions.

What we offer

• Key leadership role with end‑to‑end ownership of information security.
• High visibility within senior management and group‑level security functions.
• Opportunities to influence strategy, architecture and regulatory positioning.
• Long‑term development prospects in a stable, reputable organisation.