Senior Specialist TPRM Security Monitoring - Cyber Security (w/m/d)

As a Senior Specialist TPRM Security Monitoring with a focus on IT Security, Cyber and ICT, you ensure the effective monitoring of technical security and resilience risks of our third parties. With your technical understanding and your affinity for BCM, you strengthen the security, availability and resilience of the services procured by PostFinance.

Why you start with us

Time for recovery
6 weeks of vacation and the possibility of unpaid leave.

Flexible working models
Part-time, job- and top-sharing.

Individual development
Diverse training and further education offers, temporary job changes and stages.

Modern working worlds
Modern workplaces, co-working in Bern and Zürich as well as home office in many areas.

Maternity & paternity leave
18 weeks fully paid maternity leave and 4 weeks paternity leave.

Health in focus
Preventive offers, ergonomic workplaces and targeted support in case of longer absences.

Mobility offers
Free Half-Fare travelcard or discounted GA as well as attractive bicycle, carsharing and e-car offers.

Lived equal opportunity
Among other things through transparent salary information in our job advertisements.

What you can achieve

• You plan, coordinate and document risk-based security controls and periodic re-assessments at third parties.
• You assess evidence regarding IT Security, Cyber, ICT, Vulnerability Management, technical protective measures, BCM and operational resilience.
• You analyze, among other things, penetration test, vulnerability, certification, ISAE, SOC and other technical assurance reports.
• You evaluate technical deviations and findings, define suitable measures together with the specialist departments and ensure their follow-up.
• You monitor compliance with contractual security requirements and escalate significant technical or operational risks.
• You create meaningful control, risk and management reporting and support revision, audit and supervisory inquiries.
• You further develop control catalogs, evidence requirements, evaluation logic and tool support together with the relevant security specialist departments.

What you bring with you

• Higher degree in Cyber Security, Computer Science, Business Informatics or a comparable qualification.
• Several years of experience in IT Security, Cyber Risk, ICT Risk Management, Security Assurance, BCM or Third Party Risk Management.
• You have experience in the banking environment and know the essential regulatory requirements for information security, operational risks and Third Party Risk Management.
• You bring experience in the planning, coordination and execution of security and risk audits at third parties and can evaluate and follow up on findings and resulting measures in a structured manner.
• Sound knowledge of technical security controls and established frameworks such as ISO 27001 or NIST.
• Experience in the assessment of technical evidence, vulnerabilities, audit reports, findings and remediation measures.
• Good understanding of ICT resilience, Business Continuity and regulatory requirements in the financial environment.
• Analytical and solution-oriented way of working as well as the ability to communicate technical facts in an audience-appropriate and binding manner in German.