Senior Security GRC – Banking

About the role

We are looking for a Senior Security GRC professional to join our team and strengthen our cybersecurity, risk, and compliance capabilities in a regulated banking environment. In this role you will act as a liaison between IT, business leadership, and regulators, ensuring security and compliance are embedded across the organization.

Key responsibilities

• Execute cyber and ICT risk assessments, business impact analyses, and risk treatment plans.
• Ensure compliance with FINMA circulars, ISO 27001, LPD, PCI DSS and other relevant regulations.
• Oversee third‑party and vendor risk management.
• Maintain and enhance the ISMS, policies, and controls framework.
• Manage internal and external IT and security audits.
• Develop GRC dashboards, KPIs and reporting for the CISO.

Required profile

• 5+ years in cybersecurity, IT risk, audit or GRC, preferably in banking or fintech.
• Strong knowledge of ISO 27001, NIST and PCI DSS; experience with FINMA regulations is a plus.
• Professional certifications such as CISSP, CISM, CISA, CRISC or CDPSE are advantageous.
• Fluent in English and Italian; German is a strong advantage.
• Based in Ticino or willing to relocate to Ticino.

Required skills

• ISO 27001
• NIST
• PCI DSS

What we offer

• Flexibility to work from home and manage working hours for a healthy work‑life balance.
• Numerous benefits and incentives.
• Well‑being, motivational and team‑building activities.