Cyber Risk & Compliance Analyst – Public Sector (Switzerland)

About the role

We are looking for a Cyber Risk & Compliance Analyst to strengthen the information security posture of a public‑sector organisation in German‑speaking Switzerland. You will work closely with the agile ICT team, other security functions and the data protection officer to ensure that internal IT resources and third‑party suppliers meet rigorous security standards.

Key responsibilities

• Assess security and compliance posture of new IT equipment, systems and external service providers through structured due diligence.
• Review vendor security credentials, certifications and audit reports (e.g., ISO 27001, SOC 2, ISAE 3402) during procurement and contract negotiations.
• Define, maintain and evolve security requirements for internal IT assets and third‑party suppliers.
• Plan, run and oversee security audits, tracking remediation measures to completion.
• Deliver security awareness training and guidance to technical and non‑technical staff.
• Advise colleagues on information‑security matters in an accessible, practical way.
• Identify improvement opportunities to continuously strengthen the information‑security programme.

Required profile

• Practical experience in information security, IT risk management, GRC, IT audit or a comparable function.
• Relevant training or further education in information security.
• Strong analytical, structured and solution‑oriented working style with high attention to quality.
• Excellent communication skills for explaining complex technical topics to varied audiences.

Required skills

• Solid working knowledge of client and server operating systems, networking and cloud technologies.
• Strong grasp of information security, data protection and IT general controls.
• Familiarity with standards and frameworks such as ISO 27001, ISAE 3402 Type 2 or SOC 1 Type 2.

What we offer

• Flexible home‑office arrangement within a hybrid work model.
• Opportunity to work on high‑impact security projects in the public sector.