IT GRC Leader

As IT GRC Leader, you will own the design, deployment, and continuous improvement of a group-wide ISMS aligned to ISO 27001. You will partner with executive leadership and cross-functional teams to drive governance, risk, compliance, and security initiatives across international entities. You will lead ISO 27001 implementation and certification projects, perform risk assessments, and develop policies and controls. Your work centers on establishing governance frameworks, risk management processes, audits, and ongoing improvement to strengthen the organization’s security posture. You will communicate strategies and results to senior management and collaborate with IT, Legal, HR, Operations, и外

• Lead ISO 27001 implementation and certification initiatives
• Conduct IT and information security risk assessments
• Develop policies, standards, and security controls
• Establish governance frameworks and maintain risk registers
• Coordinate internal and external audits and drive remediation
• Serve as central point of contact for governance and compliance
• Collaborate with IT, Legal, HR, Operations, and external stakeholders
• Provide regular reporting and strategic recommendations to senior management

• 5+ years in Information Security, IT Risk Management, or GRC
• Proven track record leading ISO 27001 implementations and certifications
• ISO 27001 Lead Implementer or Lead Auditor certification
• Strong experience with risk assessments, audits, and stakeholder management
• Familiarity with Swiss and/or EU regulatory requirements (beneficial)
• Excellent communication, organizational, and influence skills
• Fluent English and German
• Swiss or EU citizenship (visa not provided)

• strong communication
• stakeholder management
• influencing across all levels
• ISO 27001
• information security governance
• risk assessment methodologies