Information Security & IT-Risk Officer <br>
ÖKK Versicherungen AG
Landquart
Key information
- Publication date:23 June 2025
- Workload:100%
- Contract type:Unlimited employment
- Place of work:Landquart
Job summary
Join us as an Information Security & IT-Risk Officer in Landquart! Enjoy flexible work at home and a supportive environment.
Tasks
- Develop and enhance our Information Security Management System (ISMS).
- Support the information security strategy and management reporting.
- Conduct risk analyses and manage risk treatment measures.
Skills
- Degree in computer science, cyber-security, or related field.
- Experience in IT security and risk management in regulated industries.
- Strong communication skills and a proactive, structured approach.
Is this helpful?
Information Security & IT-Risk Officer
80-100%, Landquart, Work@Home
What to expect
Become an Information Security & IT-Risk Officer and actively support our CISO in managing information security and IT risk management at the highest level. Your tasks include:
What we offer
- Development, implementation, and further development of our Information Security Management System (ISMS) and ICT risk management
- Support in information security strategy and reporting to management
- Monitoring IT security measures for effectiveness, cost-efficiency, and compliance
- Conducting and updating risk analyses as well as managing risk treatment measures
- Developing risk scenarios for early detection of threats
- Participation in internal and external audits and regulatory reviews
- Planning and conducting training and awareness programs to promote a security culture
- Creating documentation and collaborating with ICT, compliance, data protection, and specialist departments
What we offer
- Flexible working hours and work models
- Flat hierarchies and an open, appreciative corporate culture
- Attractive social benefits and discounts for you and your family
- Generous support for education and further training
What you bring
- Completed studies in computer science, business informatics, cyber security, or comparable qualification
- Several years of experience in IT security, ISMS, IT risk management, ideally in regulated industries
- Solid knowledge of security standards (e.g., ISO 27001, FINMA, NIST) and regulatory requirements
- Experience with IT risk assessments, compliance, audit processes, and governance
- Strong communication skills, team spirit, and assertiveness
- Initiative, analytical and structured working style
