Senior Specialist TPRM Security - Operations & Contracting (w/m/d)

As a Senior Specialist TPRM Security – Operations & Contracting, you will independently handle demanding TPRM security cases across the entire third-party lifecycle. You will incorporate security requirements into evaluations and contracts at an early stage, bring together different interests, and ensure risk-appropriate and traceable contractual integration.

Why you should start with us

Time for recovery
6 weeks of vacation and the possibility of unpaid leave.

Flexible working models
Part-time, job sharing, and top sharing.

Individual development
Diverse training and further education offers, temporary job changes, and stages.

Modern working worlds
Modern workplaces, co-working in Bern and Zürich, as well as home office in many areas.

Maternity & paternity leave
18 weeks fully paid maternity leave and 4 weeks paternity leave.

Health in focus
Preventive offers, ergonomic workplaces, and targeted support during longer absences.

Mobility offers
Free Half-Fare travelcard (Halbtax) or discounted GA, as well as attractive bicycle, car-sharing, and e-car offers.

Lived equal opportunity
Among other things through transparent salary information in our job advertisements.

What you can achieve

• You handle TPRM security cases from RfI and RfP via security due diligence and KS classification to contractual integration and ongoing support.
• You coordinate the technical assessment with Information Security, IT-Security/Cyber, IKT, BCM, operational resilience, and other security specialist departments.
• You prepare the risk-appropriate security annex and manage its coordination with partner management, Procurement, Legal, and Risk Control.
• You independently accompany contract negotiations with third parties and represent the security and resilience requirements of PostFinance clearly, pragmatically, and assertively.
• You assess contract deviations and exceptions and develop compensatory measures, risk notes, and sound decision-making bases.
• You analyze certifications as well as ISAE, SOC, and other assurance reports and document the security recommendation for onboarding.
• You support ongoing TPRM tasks, audit and revision inquiries, and continuously develop processes, templates, security annexes, and working instruments.

What you bring with you

• Higher degree in Information Security, Computer Science, Business Informatics, Law, Risk Management, or a comparable qualification.
• You have experience in the banking environment and know the essential regulatory requirements for information security, operational risks, and Third Party Risk Management.
• You bring experience in the planning, coordination, and execution of security and risk audits at third parties and can assess and track findings as well as resulting measures in a structured manner.
• Several years of experience in Third Party Risk Management, Security Due Diligence, Supplier Security, or a comparable environment.
• Broad understanding of information security, IT-security, Cyber, IKT, BCM, and operational resilience.
• Experience with security requirements in RfI/RfP processes as well as with contract annexes, assurance reports, and risk-based assessments.
• Strong negotiation skills and the ability to convincingly represent security requirements to internal stakeholders and external partners.
• Very good German and good English skills.