Senior Specialist TPRM Security - Operations & Contracting (w/m/d) — PostFinance
- Location
- Bern
- Contract
- Full-time
- Posted
- 17 days ago
Full description
As a Senior Specialist TPRM Security – Operations & Contracting, you will handle challenging TPRM security cases on your own responsibility throughout the entire third-party lifecycle. You introduce security requirements into evaluations and contracts at an early stage, bring together different interests and ensure a risk-appropriate and comprehensible contract transfer.
You can do that.
- You will process TPRM security cases from RfI and RfP through security due diligence and KS classification until the contract is signed and ongoing support.
- You coordinate the technical assessment with information security, IT security/cyber, ICT, BCM, operational resilience and other security areas.
- You prepare the risk-adequate security attachment and control its coordination with partner management, procurement, legal and risk control.
- You will accompany contract negotiations with third parties independently and represent the security and resilience requirements of PostFinance clearly, pragmatically and assertively.
- You assess contract deviations and exceptions and develop compensation measures, risk notes and well-founded decision-making principles.
- You will analyze certifications as well as ISAE, SOC and other assurance reports and document the security recommendation for onboarding.
- You support ongoing TPRM tasks, audit and audit requests and continuously develop processes, templates, security attachments and work tools.
You bring that with you
- Higher degree in Information Security, Computer Science, Business Informatics, Law, Risk Management or a comparable qualification.
- You have experience in the banking environment and know the essential regulatory requirements for information security, operational risks and third party risk management.
- You have experience in planning, coordinating and conducting security and risk audits with third parties and can assess and track findings and resulting measures in a structured manner.
- Several years of experience in third party risk management, security due diligence, supplier security or a comparable environment.
- Broad understanding of information security, IT security, cyber, ICT, BCM and operational resilience.
- Experience with security requirements in RfI/RfP procedures as well as with contract annexes, assurance reports and risk-based assessments.
- Strong negotiating skills and the ability to represent security requirements convincingly to internal stakeholders and external partners.
- Very good knowledge of German and English.
Questions about this listing
What salary does PostFinance offer for this role?
The original listing does not state a salary. Our estimate for this role and sector in Bern is CHF 113'000 - 192'000 gross per year — an estimate, not a figure communicated by PostFinance. The calculator on this site converts a gross salary into your actual net take-home once cross-border tax and social contributions are applied.
Is this a full-time role, and what type of contract does PostFinance offer?
This listing is a full-time position. The contract type shown here comes directly from the employer's original posting; always confirm exact hours, notice period and probation length with PostFinance during the application process, since these details can vary by role even within the same contract category.
Do I need a cross-border work permit for a role in Bern?
EU/EFTA residents living in the border zone of the country adjoining Canton Bern can apply for a G permit; the Swiss employer files it with that canton's migration office after the contract is signed. Border-zone rules and processing times vary by neighbouring country and canton, so confirm the specifics with Bern's cantonal migration office or with HR during the application.
How do I apply for this position at PostFinance?
Use the "Apply now" button on this page — it links directly to PostFinance's original listing at jobs.postfinance.ch, so your application goes straight to the employer's own applicant-tracking system. Frontaliere Ticino does not collect or forward applications itself.
