Senior Specialist TPRM Security Monitoring Cyber Security
PostFinance Ltd is a FINMA-regulated Swiss financial institution and systemically important bank serving private and business customers with payments, savings, investments, pensions and digital banking solutions.
About PostFinance Ltd
PostFinance Ltd is a private-law Swiss company and wholly owned subsidiary of Swiss Post Ltd. It operates banking and financial-services products, including digital payments, savings, investing, retirement services, e-trading, and currently available cryptocurrency trading, custody and Ethereum staking.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will plan, coordinate, and document risk-based security controls and recurring reassessments for third parties. You will assess technical evidence and assurance reports, manage findings and corrective actions, monitor contractual security requirements, produce risk reporting, and improve control catalogs and supporting tools.
Requirements
- Higher education qualification in cyber security, computer science, business information systems, or a comparable field
- Several years of experience in IT security, cyber risk, ICT risk management, security assurance, business continuity management, or third-party risk management
- Experience in banking and knowledge of regulatory requirements for information security, operational risk, and third-party risk management
- Experience planning, coordinating, and conducting third-party security and risk audits
- Knowledge of technical security controls and frameworks such as ISO 27001 or NIST
- Experience assessing technical evidence, vulnerabilities, audit reports, findings, and remediation measures
- Understanding of ICT resilience, business continuity, and financial-services regulation
- Ability to communicate technical matters clearly in German
Responsibilities
- Plan, coordinate, and document risk-based security controls and periodic reassessments for third parties
- Assess evidence covering IT security, cyber security, ICT, vulnerability management, technical safeguards, business continuity management, and operational resilience
- Analyze penetration-test, vulnerability, certification, ISAE, SOC, and other technical assurance reports
- Evaluate technical deviations and findings, define measures with specialist teams, and ensure follow-up
- Monitor contractual security requirements and escalate significant technical or operational risks
- Create control, risk, and management reports and support audit, revision, and supervisory requests
- Improve control catalogs, evidence requirements, assessment logic, and tool support with security specialists
Benefits
- Six weeks of vacation and the option of unpaid leave
- Part-time, job-sharing, and top-sharing arrangements
- Home office in many areas
- 18 weeks of fully paid maternity leave and four weeks of paternity leave
- Preventive health offerings, ergonomic workstations, and support during longer absences
- Free Half Fare Travelcard or discounted General Abonnement, plus bicycle, car-sharing, and electric-car offers
- Employee vouchers of up to CHF 500 per year
- Preferential mortgage interest rates and free accounts, credit cards, and custody accounts
Hiring Process
Apply online and upload your CV and relevant documents; receive confirmation; application review within two to three weeks; first interview; second interview if successful; telephone offer followed by email confirmation and online contract package; onboarding with a Welcome Day.
