Lead Security & Risks — Brack.Alltron AG

Full description

Tasks

Strategy & Architecture

• Development and implementation of a security and enterprise architecture according to "Secure-by-Design" principles and a shift left mentality in the field of software engineering
• Development and communication of the security vision and strategy in accordance with the company objectives
• Advising IT on secure software and solution concepts as well as on the selection of new technologies and architecture guidelines

Team leadership & development

• Leadership, coaching and development of a team of Information Security Officers
• Design of an efficient team structure for project monitoring and risk supervision

Risk Management & Governance

• Responsibility for central IT risk management throughout the entire life cycle – from idea to decommissioning
• Establishment, operation and further development of the ISMS and its guidelines, standards or guardrails
• Definition and analysis of KPIs for continuous improvement

Security Operations & Optimization

• Ensure the overview and effective security incident management of our IT infrastructure in close cooperation with your internal peers and the external Security Operations Center
• Proactive threat analysis and identification of vulnerabilities and systemic vulnerabilities

Projects, Vendors & Budget

• Management of security projects with external partners (SOC, Pentests, etc.)
• Responsibility for the Security & Risks budget and strategic planning of technology investments

Enablement and awareness

• Enabling other teams to implement security requirements on their own responsibility through training, workshops and resources
• Awareness-raising campaigns to increase security awareness

Innovation & Research

• Observe industry trends and new technologies to identify and contribute potential for improving our security products and processes
• Promote and actively support innovation within your area

Requirements

• Completed degree in computer science, business informatics or cyber/information security (FH/Uni/ETH)
• Specialization in IT security (CAS/MAS, CISSP, CISM or similar); Cloud security certifications are beneficial
• Several years of experience as CISO / Head of Security / SOC Manager, of which at least 2 years in a management position
• In-depth understanding of IT infrastructure, networks, Dev(Sec)Ops, cloud and IT service management as well as experience with cloud migrations (on-premise to public cloud)
• Experience in software development is a must
• Experience with Generative AI and LLMs and their operationalization in the company
• Experience in larger tenders, vendor management and PoC support
• Experience in agile environments (Scrum, Kanban); E-commerce experience is beneficial
• Experience-proven knowledge of a common standard (ISO 27001, PCI DSS, NIST, etc.)
• Strong leadership, coaching and change management competence
• Ability to convey complex security issues in an understandable way up to the management level
• Pragmatic, analytical and data-supported working method with high personal responsibility and resilience. We are looking for someone who can maneuver tradeoffs well between security, speed, feasibility and user/developer experience.
• Fluent German, good English skills in word and writing (min. B1/B2)

We offer

• Perks: Attractive perks in the Brack online shop as well as lunch perks and staff restaurants in Mägenwil and Willisau.
• Recreation: At least 5 weeks of vacation, in addition there is the possibility for holiday purchase and unpaid vacation.
• Development: Internal training in the own Academy as well as financial participation in external further education.
• Family: 18 weeks of paid maternity leave with extension and 4 weeks of paid paternity leave.
• Insurance: Super-compulsory – 100% continued pay and full financing of the sickness allowance insurance by the employer.
• Mobility: free parking, financial participation in public transport and pool vehicles for business appointments.

"Together we shape the trade of tomorrow" Brack.Alltron employs around 1300 employees and generates over one billion turnover. The company exists because a person had the courage to find new ways and go them. Our success story shows that through each individual, something great is created together and we love our uniqueness. We set ourselves ambitious goals, but it is very important to us that we act responsibly, promote and challenge each other and enjoy what we do every day.