Senior Specialist TPRM Security Monitoring - Information Security (w/m/d)

As a Senior Specialist TPRM Security Monitoring with a focus on Information Security and BCM, you ensure the risk-based and verifiable security monitoring of our third parties. You create transparency regarding information, data, and resilience risks, thereby making an important contribution to the security and operational resilience of PostFinance.

Why you start with us

Time for recovery
6 weeks of vacation and the possibility of unpaid leave.

Flexible working models
Part-time, job sharing, and top sharing.

Individual development
Diverse training and further education offers, temporary job changes, and stages.

Modern working environments
Modern workplaces, co-working in Bern and Zürich, as well as home office in many areas.

Maternity & paternity leave
18 weeks fully paid maternity leave and 4 weeks paternity leave.

Health in focus
Preventative offers, ergonomic workplaces, and targeted support during longer absences.

Mobility offers
Free Half-Fare card (Halbtax) or discounted GA, as well as attractive bicycle, car sharing, and e-car offers.

Lived equal opportunity
Among other things through transparent salary information in our job advertisements.

What you can achieve

• You plan, coordinate, and document risk-based security controls and periodic re-assessments at third parties.
• You assess information security, data protection, BCM, and resilience evidence as well as certifications, ISAE, SOC, and other assurance reports.
• You verify the effectiveness of contractually agreed security requirements and derive concrete findings and measures from deviations.
• You manage remediation tracking, monitor agreed deadlines, and escalate significant or unacceptable risks.
• You create target-group-oriented risk, control, and management reporting and support revision, audit, and supervisory inquiries.
• You continuously develop the Security Control & Monitoring Framework, the evidence requirements, and the assessment logic.
• You work closely with Information Security, BCM, operational resilience, partner management, Procurement, Legal, and Risk Control.

What you bring with you

• Higher education degree in Information Security, Business Informatics, Risk Management, or a comparable qualification.
• Several years of experience in Information Security, Security Assurance, Audit, BCM, operational resilience, or Third Party Risk Management.
• You have experience in the banking environment and know the essential regulatory requirements for information security, operational risks, and Third Party Risk Management.
• You bring experience in the planning, coordination, and execution of security and risk audits at third parties and can assess and follow up on findings and resulting measures in a structured manner.
• Sound knowledge of information security and control systems, especially ISO 27001 as well as SOC and ISAE reports.
• Experience in assessing evidence, control deviations, findings, and risk-appropriate measures.
• Good understanding of the regulated financial environment and the requirements for third parties and outsourcing.
• Analytical, structured, and risk-oriented way of working as well as clear and binding communication in German and English.