Senior Specialist TPRM Security Monitoring - Cyber Security (w/m/d) — PostFinance
- Location
- Bern
- Contract
- Full-time
- Posted
- 17 days ago
Full description
As a Senior Specialist TPRM Security Monitoring with a focus on IT Security, Cyber and ICT, you ensure the effective monitoring of technical security and resilience risks of our third parties. With your technical understanding and affinity to BCM, you strengthen the security, availability and resilience of the services provided by PostFinance.
You can do that.
- You plan, coordinate and document risk-based security controls and periodic re-assessments at third parties.
- You will assess evidence of IT security, cyber, ICT, vulnerability management, technical protection measures, BCM and operational resilience.
- Among other things, you will analyze penetration test, vulnerability, certification, ISAE, SOC and other technical assurance reports.
- You evaluate technical deviations and findings, define suitable measures together with the specialist bodies and ensure their tracking.
- You monitor compliance with contractual security requirements and escalate material technical or operational risks.
- You create meaningful control, risk and management reporting and support audit, audit and supervisory requests.
- You develop control catalogue, evidence requirements, evaluation logic and tool support together with the relevant security specialist areas.
You bring that with you
- Higher degree in Cyber Security, Computer Science, Business Informatics or a comparable qualification.
- Several years of experience in IT security, cyber risk, ICT risk management, security assurance, BCM or third party risk management.
- You have experience in the banking environment and know the essential regulatory requirements for information security, operational risks and third party risk management.
- You have experience in planning, coordinating and conducting security and risk audits with third parties and can assess and track findings and resulting measures in a structured manner.
- In-depth knowledge of technical security controls and established frameworks such as ISO 27001 or NIST.
- Experience in assessing technical evidence, vulnerabilities, audit reports, finding and remediation measures.
- Good understanding of ICT resilience, business continuity and regulatory requirements in the financial environment.
- Analytical and solution-oriented working methods as well as the ability to communicate technical issues in German in an addressable and binding manner.
Questions about this listing
What salary does PostFinance offer for this role?
The original listing does not state a salary. Our estimate for this role and sector in Bern is CHF 113'000 - 192'000 gross per year — an estimate, not a figure communicated by PostFinance. The calculator on this site converts a gross salary into your actual net take-home once cross-border tax and social contributions are applied.
Is this a full-time role, and what type of contract does PostFinance offer?
This listing is a full-time position. The contract type shown here comes directly from the employer's original posting; always confirm exact hours, notice period and probation length with PostFinance during the application process, since these details can vary by role even within the same contract category.
Do I need a cross-border work permit for a role in Bern?
EU/EFTA residents living in the border zone of the country adjoining Canton Bern can apply for a G permit; the Swiss employer files it with that canton's migration office after the contract is signed. Border-zone rules and processing times vary by neighbouring country and canton, so confirm the specifics with Bern's cantonal migration office or with HR during the application.
How do I apply for this position at PostFinance?
Use the "Apply now" button on this page — it links directly to PostFinance's original listing at jobs.postfinance.ch, so your application goes straight to the employer's own applicant-tracking system. Frontaliere Ticino does not collect or forward applications itself.
