Senior Specialist TPRM Security Monitoring - Information Security (w/m/d) — PostFinance
- Location
- Bern
- Contract
- Full-time
- Posted
- 17 days ago
Full description
As a Senior Specialist TPRM Security Monitoring with a focus on Information Security and BCM, you ensure the risk-based and verifiable security monitoring of our third parties. You create transparency about information, data and resilience risks and thus make an important contribution to the security and operational resilience of PostFinance.
You can do that.
- You plan, coordinate and document risk-based security controls and periodic re-assessments at third parties.
- You will assess information security, privacy, BCM and resilience credentials, as well as certifications, ISAE, SOC and other assurance reports.
- You check the effectiveness of contractually agreed safety requirements and derive specific findings and measures from deviations.
- You control remediation tracking, monitor agreed deadlines and escalate material or unsustainable risks.
- You create user-friendly risk, control and management reporting and support audit, audit and supervisory requests.
- You will continuously develop the Security Control & Monitoring Framework, the evidence requirements and the evaluation logic.
- You work closely with information security, BCM, operational resilience, partner management, procurement, legal and risk control.
You bring that with you
- Higher degree in information security, business informatics, risk management or a comparable qualification.
- Several years of experience in information security, security assurance, audit, BCM, operational resilience or third party risk management.
- You have experience in the banking environment and know the essential regulatory requirements for information security, operational risks and third party risk management.
- You have experience in planning, coordinating and conducting security and risk audits with third parties and can assess and track findings and resulting measures in a structured manner.
- In-depth knowledge of information security and control systems, in particular ISO 27001 and SOC and ISAE reports.
- Experience in assessing evidence, control deviations, finding and risk-appropriate measures.
- Good understanding of the regulated financial environment and requirements for third parties and outsourcing.
- Analytical, structured and risk-oriented working methods as well as clear and binding communication in German and English.
Questions about this listing
What salary does PostFinance offer for this role?
The original listing does not state a salary. Our estimate for this role and sector in Bern is CHF 113'000 - 192'000 gross per year — an estimate, not a figure communicated by PostFinance. The calculator on this site converts a gross salary into your actual net take-home once cross-border tax and social contributions are applied.
Is this a full-time role, and what type of contract does PostFinance offer?
This listing is a full-time position. The contract type shown here comes directly from the employer's original posting; always confirm exact hours, notice period and probation length with PostFinance during the application process, since these details can vary by role even within the same contract category.
Do I need a cross-border work permit for a role in Bern?
EU/EFTA residents living in the border zone of the country adjoining Canton Bern can apply for a G permit; the Swiss employer files it with that canton's migration office after the contract is signed. Border-zone rules and processing times vary by neighbouring country and canton, so confirm the specifics with Bern's cantonal migration office or with HR during the application.
How do I apply for this position at PostFinance?
Use the "Apply now" button on this page — it links directly to PostFinance's original listing at jobs.postfinance.ch, so your application goes straight to the employer's own applicant-tracking system. Frontaliere Ticino does not collect or forward applications itself.
