Information Security Consultant

For the information security of a cantonal department in public administration, we are looking for an external consultant for information security. You will provide technical support to the information security officer and ensure that security requirements in projects and specialist areas are systematically checked, documented, and implemented. You will work closely with around 60 application managers and contribute to protecting sensitive information from loss, manipulation, and unauthorized access.

Tasks

• Accompanying and training application managers in the creation of protection needs analyses and ISDS concepts (Information Security and Data Protection)

• Advising application managers on achieving a defined information security level, as well as formal and content-related review of ISDS concepts

• Reviewing and demanding appropriate information security clauses in contracts, as well as liaising with suppliers during supplier selection, contract drafting, and penetration tests

• Demanding and tracking measures for identified vulnerabilities from penetration tests and audits

• Verifying the necessity of authorizations based on system excerpts, including sensitizing the affected individuals

• Ensuring a uniform, central storage of security documentation, as well as creating and maintaining overviews and dashboards for documentation, training, contracts, and security vulnerabilities

• Processing and tracking tickets, including breaking down complex tickets into subtasks

• Checking the implementation of policies and guidelines for information security

• Many years of experience in information security and risk management, ideally complemented by experience with audits

• Several years of practical experience in software development, software procurement, or a comparable role with a strong IT focus

• Completed Master's degree in Engineering (University of Applied Sciences or University) or a degree in a related field with in-depth technical knowledge

• Training or further education in Business Analysis, Requirements Management, agile development projects, and IT Service Management

• In-depth knowledge of web and desktop applications (web and API, databases, network fundamentals), as well as practical understanding of technical and organizational information security

• Advantageous: Knowledge in authentication and authorization (SSO, OpenID Connect, MFA, RBAC), cloud/SaaS, backup & recovery, audit logs, DevSecOps/containers, OT/SCADA, mobile, and IoT

• Advantageous: Knowledge of ISO 27001, BSI IT-Grundschutz, IKT-Minimalstandards or NIST CSF, as well as cryptographic methods, BCM, and GRC tools

• Ability to explain security requirements in a target-group-appropriate manner and to deal constructively with conflicts of objectives such as time pressure vs. security

• Responsible, structured, and independent work style with a high demand for quality and enjoyment in collaborating with various stakeholders

• Very good German language skills, both written and spoken

General Framework Conditions

• Start: 01.01.2027

• Duration: until 31.12.2027

• Workload: 60%

• Remote: Fully remote possible (weekly meeting on-site)

• Language: German

Find Jobs in Switzerland on Arbeitnow