Information Security Manager – GRC (Zurich)

About the role

We are looking for an experienced Information Security Manager to join a leading cyber‑security provider in Zurich. You will advise clients on risk, compliance and ISMS matters, design security frameworks and mentor junior team members while delivering high‑impact cyber‑risk solutions.

Key responsibilities

• Provide expert advice on risk management, compliance and Information Security Management System (ISMS) implementation.
• Conduct security assessments and audits for client environments.
• Design, implement and maintain governance, risk and compliance (GRC) frameworks.
• Prepare and present reporting on security posture and remediation activities.
• Lead and mentor junior consultants, fostering technical growth and knowledge sharing.

Required profile

• Fluent German (mandatory).
• Minimum five years of professional experience in cyber security.
• Proven experience with ISO 2700x standards and NIST frameworks.
• Willingness to travel to client sites as needed.

Required skills

• ISO 27001
• NIST
• ISMS
• Risk Assessments
• Governance Risk Compliance (GRC)

What we offer

• Flexible working hours and hybrid work model with home‑office after probation.
• 5 weeks of vacation per year.
• Up to 100 hours of annual training time.
• Free coffee, tea, fruit and access to a variety of local restaurants.