Specialist: IT Security Policy Management and Controls

26 May 2026
100%
Zürich

Job summary

Join the dynamic Security Governance team at Zürcher Kantonalbank, ensuring IT security compliance. Enjoy a supportive environment with growth opportunities.

Tasks

Define and manage technical IT security guidelines for the bank.
Collaborate to establish controls and evidence for compliance.
Implement guidelines in operational processes and compliance checks.

Skills

Degree in Computer Science, Business Informatics, or similar.
Extensive IT security experience, especially in regulatory settings.
Strong communication skills to explain complex topics clearly.

Is this helpful?

About the job

100% | IT / Business Engineering | Zurich | Experienced Professionals

Our dynamic Security Governance team of 12 people in the IT and Cyber Security division of Zürcher Kantonalbank ensures compliance with IT security policies. This is achieved through clear directive requirements, their integration into operational processes, as well as conducting compliance audits, both internally within the bank and for external service providers.

We are looking for you as an active support in our team with plenty of creative freedom and room to contribute your ideas.

Your Tasks

Actively defining and managing the bank's technical IT security policies
Defining controls and evidence for the policies in close coordination with Security Architecture and other central departments
Operationally embedding suitable policies in change and run processes
Operationalising and supporting compliance audits related to the policies
Using new technologies such as AI, automation, and data analytics to make the processes around the policies more efficient and automated

Your Profile

Completed studies in computer science, business informatics, or a comparable qualification
Many years of operational and architectural IT security experience, ideally in a regulatory environment
Sound knowledge of IT security standards and frameworks (e.g. ISO 27001, NIST, BSI IT-Grundschutz), certifications such as CISA, CISM, CISSP are an advantage
Operational experience in IT security policies, controls, and their verifiability
Communicative and solution-oriented personality who can explain complex technical topics clearly
Good German and English skills in writing and speaking

Our Offer

Great freedom for participation and co-creation
Area of responsibility with high visibility
Motivated and diverse team looking forward to you
Various opportunities for personal and professional development
Central, easily accessible, and attractive workplace with the possibility to organise your work flexibly (hybrid)
Comprehensive overall package, which besides an attractive base salary and variable remuneration offers many benefits and discounts – from A for pension provision to Z for ZVV bonus pass

Fabian Herzig
is happy to assist you.
Phone: 044 292 27 96