Senior Specialist TPRM Security - Operations & Contracting

Skills

About the Role

You will manage complex third-party security cases across the full third-party lifecycle, from RfI and RfP through security due diligence, classification, contracting, and ongoing support. You will coordinate security assessments, prepare and negotiate security contract appendices, assess exceptions, analyse assurance reports, document recommendations, support audits, and improve processes and templates.

Requirements

• Higher education qualification in information security, computer science, business informatics, law, risk management, or a comparable field
• Experience in banking and knowledge of regulatory requirements for information security, operational risks, and third-party risk management
• Experience planning, coordinating, and conducting third-party security and risk audits
• Several years of experience in third-party risk management, security due diligence, supplier security, or a comparable environment
• Broad understanding of information security, IT security, cyber, ICT, BCM, and operational resilience
• Experience with security requirements in RfI and RfP processes, contract appendices, assurance reports, and risk-based assessments
• Negotiation skills and the ability to represent security requirements to internal stakeholders and external partners
• Very good German and good English skills

Responsibilities

• Manage TPRM security cases from RfI and RfP through security due diligence, classification, contracting, and ongoing support
• Coordinate assessments with information security, IT security, cyber, ICT, BCM, operational resilience, and other security specialists
• Prepare risk-appropriate security appendices and coordinate them with partner management, procurement, legal, and risk control
• Support contract negotiations with third parties and represent security and resilience requirements
• Assess contractual deviations and exceptions and develop compensating controls, risk notes, and decision support
• Analyse certifications and ISAE, SOC, and other assurance reports and document onboarding security recommendations
• Support ongoing TPRM work and audit requests and improve processes, templates, security appendices, and tools

Benefits

• 6 weeks of vacation and the option of unpaid leave
• Part-time work, job sharing, and top sharing
• Home office in many areas
• 18 weeks of fully paid maternity leave and 4 weeks of paternity leave
• Preventive health offerings, ergonomic workstations, and support during longer absences
• Free Half Fare Travelcard or discounted GA travelcard, plus bicycle, car-sharing, and electric-car offers
• Employee vouchers of up to CHF 500 per year
• Preferential mortgage interest and fee-free accounts, credit cards, and custody accounts
• Internal networks and communities

Hiring Process

Online application with CV and relevant documents; confirmation; application review within two to three weeks; first interview; second interview if mutual interest; telephone offer; employment confirmation and online contract package; onboarding and Welcome Day.