Senior Specialist TPRM Security Monitoring - Information Security

PostFinance Ltd is a FINMA-regulated Swiss financial institution and systemically important bank serving private and business customers with payments, savings, investments, pensions and digital banking solutions.

Bern, Switzerland
About PostFinance Ltd

PostFinance Ltd is a private-law Swiss company and wholly owned subsidiary of Swiss Post Ltd. It operates banking and financial-services products, including digital payments, savings, investing, retirement services, e-trading, and currently available cryptocurrency trading, custody and Ethereum staking.

View jobs by PostFinance Ltd

Skills

Candidate Availability

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will plan, coordinate, and document risk-based security controls and periodic reassessments for third parties. You will evaluate information security, data protection, BCM, and resilience evidence, certifications, and assurance reports. You will track remediation, escalate material risks, create risk and management reporting, support audits, and continuously improve the security control and monitoring framework.

Requirements

  • Higher education qualification in information security, business informatics, risk management, or a comparable field
  • Several years of experience in information security, security assurance, audit, BCM, operational resilience, or third-party risk management
  • Experience in banking and knowledge of regulatory requirements for information security, operational risks, and third-party risk management
  • Experience planning, coordinating, and conducting third-party security and risk audits
  • Knowledge of information security and control systems, including ISO 27001, SOC, and ISAE reports
  • Experience assessing evidence, control deviations, findings, and risk-appropriate actions
  • Understanding of the regulated financial environment, third parties, and outsourcing
  • German and English communication skills

Responsibilities

  • Plan, coordinate, and document risk-based security controls and periodic reassessments for third parties
  • Assess information security, data protection, BCM, and resilience evidence, certifications, and ISAE and SOC reports
  • Verify contractual security requirements and derive findings and actions from deviations
  • Manage remediation tracking, monitor deadlines, and escalate material or unacceptable risks
  • Prepare risk, control, and management reporting and support audit and regulatory requests
  • Develop the security control and monitoring framework, evidence requirements, and assessment logic
  • Collaborate with Information Security, BCM, operational resilience, partner management, procurement, legal, and risk control

Benefits

  • 6 weeks of vacation and the option of unpaid leave
  • Part-time work, job sharing, and top sharing
  • Home office in many areas
  • 18 weeks of fully paid maternity leave and 4 weeks of paternity leave
  • Preventive health offerings, ergonomic workstations, and support during longer absences
  • Free Half Fare Travelcard or discounted GA travelcard, plus bicycle, car-sharing, and electric-car offers
  • Employee vouchers of up to CHF 500 per year
  • Preferential mortgage interest and fee-free accounts, credit cards, and custody accounts
  • Internal networks and communities

Hiring Process

Online application with CV and relevant documents; confirmation; application review within two to three weeks; first interview; second interview if mutual interest; telephone offer; employment confirmation and online contract package; onboarding and Welcome Day.