Security Engineer safeguarding K - 12 student data in several locations for EduTech startup. Designing secure software systems and ensuring data protection to comply with privacy standards.
About the role
- Information Security Specialist ensuring digital security and compliance at cyberunity AG in Zürich. Collaborating with IT teams to implement security measures and address vulnerabilities.
Responsibilities
- Establish and implement an ISO 27001-compliant ISMS and ensure successful ISO 14298 re-certification
- In a later step, FISMA compliance will also be addressed
- Serve as the central point of contact for group companies (CH, DE, US, UK) on IT and information security as well as data protection
- Provide active, hands-on support and advise group IT and business units on measures to increase information and IT security on topics such as information classification, protection needs analysis, and asset management
- Co-responsible for the group’s overall information and IT security regarding engineering, operations, and risk management for both on-premises and cloud environments
- Identify vulnerabilities in IT/OT security and define, demand, and conceptually prepare necessary corrective and protective measures
- Prepare, support, and follow up on internal and external audits: ISO 27001, ISO 14298, FISMA, and customer audits
- Analyze and handle security incidents in cooperation with the external SOC partner, coordinate penetration tests, and support IT and line projects on information security matters
- Design, prepare, and conduct awareness campaigns and information security training
- Draft and revise policies and directives
Requirements
- Degree or education in Computer Science, Business Informatics with a specialization in Information Security and/or IT Security, or relevant practical experience in information security
- Further security-related certifications are a plus (e.g., CISSP, CISA, CISM, or CAS/MAS InfoSec)
- At least 2–3 years of practical project experience in designing and implementing ISMS according to ISO/IEC 27001 and NIST, and experience in IT audit
- Solid foundational understanding of IT security, particularly in network and cloud journeys and Cloud Security (Azure)
- Familiarity with IT GRC topics such as data protection, IT risk management, and BCM (Business Continuity Management)
- A connecting and communicative personality with a pragmatic hands-on mentality, analytical thinking, service- and solution-orientation, and a strong drive to work independently
- Ability to analyze complex security-related topics and make them understandable to colleagues without a technical background
- Strong personal commitment to progressively develop information security maturity within an organization and embed it in cooperation with people: proactively engage, listen, bring others along, and develop and solve together
- Business-fluent written and spoken German and English are required
Benefits
- An open and appreciative corporate culture characterized by respect, commitment, and reliability
- A well-rehearsed team with flat hierarchies and an open communication culture
- Flexible working both on-site and from home
- A range of benefits that round out this exciting challenge
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Security Engineer focusing on data protection and privacy for Kira Learning's educational technology. Safeguarding K - 12 student data while collaborating with engineering teams on secure software development.
Senior Cybersecurity Engineer responsible for protecting Advansys and its clients' IT infrastructure. Designing, implementing, and managing security solutions, while mentoring junior engineers.
Security Engineer responsible for incident response and security protocol design at Sinch. Joining a global team to safeguard sensitive information and enhance cybersecurity measures.
Content Developer creating engaging and effective learning materials for coding education online. Collaborating with a team to develop tailored resources for K - 12 learners in Egypt.
Campus Security Officer ensuring safety at Bright Horizons early childcare centers in Seattle. Responsible for access control, surveillance, and emergency response.
Sounding and Security Watch responsible for Navy asset security at NSF Diego Garcia. Conducting checks and ensuring safety during designated watch hours with strong situational awareness.
Sales Enablement Manager creating technical content for Upwind Security. Collaborating across teams to translate cloud security concepts into clear narratives for engineers and security leaders.
Security Engineer designing and implementing security measures to protect Snap Inc.'s infrastructure. Collaborating across teams while focusing on threat detection and response strategies.
IT Security & Compliance Head at Lonza leading security strategy and managing global risk. Collaboration with senior leadership to enhance information security across Capsules & Health Ingredients business.