Senior IT Security Specialist - Cyber Security Incident Response

About the role

Sonova, a Swiss hearing care provider, is looking for a Senior IT Security Specialist focused on cyber security incident response. The role manages Sonova's IT security, monitors risks, leads complex incident responses and advises senior management on security strategy at a global, enterprise level.

Key responsibilities

• Design and implement policies, procedures and controls within the IT security management framework that meet defined regulations and standards.
• Analyse business needs and complex technology-related security threats, risks or issues and implement measures protecting critical systems.
• Coordinate and monitor regular security checks and risk assessments, develop escalation procedures and report risk scenarios and remedial measures to senior management.
• Ensure security is built into the development, selection, installation, configuration and rollout of hardware, applications and software.
• Communicate the status and impact of security incidents to stakeholders, support complex security queries from the business and deliver IT security training to different audiences.
• Handle severe or complex IT security or data breach incidents.
• Functionally lead an IT security team and mentor less experienced security specialists or engineers.
• Ensure IT suppliers deliver on time, on quality and on cost, and stay compliant and secure.

Required profile

• Bachelor's degree or higher in information management, computer science, business management or similar.
• At least 8 years of domain-specific experience, including 2 years of international experience.
• Experience with relevant technologies, solutions and methodologies, and keeping up with IT trends.
• Experience dealing with IT suppliers, financial budgeting, control and reporting.
• Ability to evaluate complex situations, make decisions with broad business impact and guide others; service-oriented, self-starter and flexible.
• Strong collaboration, intercultural and communication skills at management level, able to inspire people and handle conflicts.
• Professional written and verbal English; other languages are a plus.

Required skills

• Deep understanding of advanced IT-security architecture, cyber security fundamentals and cloud security.
• Vulnerability management and IT security architecture on IT networking, scripting and operating systems.
• In-depth knowledge of regulatory and compliance requirements.

What we offer

• A flexible hybrid working model.
• A wide range of training opportunities and individual development plans.