Lead Security & Risks

About the job

Lead Security & Risks

What to expect

Strategy & Architecture:

• Development and implementation of a security and enterprise architecture based on "Secure-by-Design" principles and a shift-left mentality in software engineering
• Development and communication of the security vision and strategy in line with corporate goals
• Advising IT on secure software and solution concepts as well as on the selection of new technologies and architectural guidelines

• Leading, coaching, and developing a team of Information Security Officers
• Designing an efficient team structure for project support and risk oversight

• Responsibility for central IT risk management throughout the entire lifecycle – from idea to decommissioning
• Building, operating, and further developing the ISMS and its policies, standards, and guardrails
• Defining and analysing KPIs for continuous improvement

• Ensure oversight and effective security incident management of our IT infrastructure in close collaboration with your internal peers and the external Security Operations Center
• Proactive analysis of the threat landscape as well as identification of vulnerabilities and systemic weaknesses

• Leading security projects with external partners (SOC, pentests, etc.)
• Responsibility for the Security & Risks budget and strategic planning of technology investments

• Empowering other teams to independently implement security requirements through training, workshops, and resources
• Awareness campaigns to strengthen security consciousness

• Monitor industry trends and new technologies to identify and contribute potentials for improving our security products and processes
• Actively promote and support innovations within your area

What you bring

• Completed studies in computer science, business informatics, or cyber/information security (FH/Uni/ETH)
• Specialisation in IT security (CAS/MAS, CISSP, CISM or similar); cloud security certifications are an advantage
• Several years of experience as CISO / Head of Security / SOC Manager, with at least 2 years in a leadership position
• Solid understanding of IT infrastructure, networks, Dev(Sec)Ops, cloud, and IT service management as well as experience with cloud migrations (on-premise to public cloud)
• Experience in software development is a must
• Experience with generative AI and LLMs as well as their operationalisation in the company
• Experience in larger tenders, vendor management, and PoC support
• Experience in agile environments (Scrum, Kanban); e-commerce experience is an advantage
• Practical knowledge of a common standard (ISO 27001, PCI DSS, NIST, etc.) is an advantage
• Strong leadership, coaching, and change management skills
• Ability to communicate complex security topics understandably up to executive level
• Pragmatic, analytical, and data-driven working style with high personal responsibility and resilience. We are looking for someone who can skilfully navigate trade-offs between security, speed, feasibility, and user/developer experience.
• Fluent in German, good English skills in spoken and written form (at least B1/B2)

Are you interested or have further questions?

Sercan Ugur is happy to assist you with any questions.

sercan.ugur@brackalltron.ch

About us

"Together we shape the trade of tomorrow" Brack.Alltron employs around 1300 people and generates over one billion in revenue. The company exists because one person had the courage to find new ways and take them. Our success story shows that something great arises through each individual, together, and we love our uniqueness. We set ambitious goals, and it is very important to us that we act responsibly, support and challenge each other, and enjoy what we do every day.

Our hiring process

• You create your profile in our career portal and apply directly online for the advertised position.
• You will immediately receive a confirmation of receipt and within a maximum of 10 working days you will receive feedback on the next steps.
• While you show us your patience, we take personal time to review your application and define the next steps.
• If your documents convince us, we get to know each other via live video call or in a personal interview.
• The "match" is mutually confirmed. Then we proceed to the second interview round where you get to know your future workplace and the team.
• YES – we have chosen each other! The employment contract will be sent to you digitally and after signing, you will receive access to our internal communication channels and at the same time we prepare your onboarding process.

Benefits

• Discounts: Attractive discounts in the Brack online shop as well as lunch discounts and staff restaurants in Mägenwil and Willisau.
• Rest: At least 5 weeks of holiday, with the possibility to buy additional leave and unpaid leave.
• Development: Internal training in our own academy as well as financial support for external further education.
• Family: 18 weeks paid maternity leave with extension possibility and 4 weeks paid paternity leave.
• Insurance: Above statutory – 100% continued salary payment and full financing of daily sickness allowance insurance by the employer.
• Mobility: Free parking spaces, financial contribution to public transport, and pool vehicles for business appointments.