IT Auditor

In this role you will lead the expansion of the ISO 27001 ISMS across the group, shaping the security program for a growing international tech company. You will collaborate with executives, IT, Legal, HR and Operations to drive governance, risk management, compliance and certification initiatives. You’ll manage ISO 27001 audits, conduct risk assessments, and provide strategic risk reporting to senior stakeholders. This is a chance to build a group-wide GRC program and influence security across Europe, the Middle East and Africa.

• Permanent position
• 80-100% workload
• Flexible working with up to two home-office days per week
• International project environment

• Lead the expansion and ownership of ISO 27001 ISMS across multiple group entities
• Collaborate with executive leadership, IT, Legal, HR and Operations to drive governance, risk management, compliance and certification initiatives
• Manage ISO 27001 audits and risk assessments
• Establish governance frameworks and continuous improvement of the security program
• Provide strategic risk reporting to senior stakeholders
• Support and drive a group-wide GRC program and international projects

• Experience leading ISO 27001 implementation and certification projects
• Strong background in Information Security, IT Risk Management or GRC
• Excellent stakeholder management skills
• Knowledge of Swiss or EU regulatory environments
• Fluency in English
• German language skills are a plus

• Stakeholder management
• Cross-functional collaboration
• Strategic thinking
• ISO 27001
• ISMS
• Risk assessments