Head of Group Information Security

Lindt; Schweiz; Hybrid; EUR 158.000 - 243.000; Vollzeit

Zusammenfassung

Lindt in Kilchberg, Switzerland seeks a Head of Group Information Security to lead and advocate a comprehensive cybersecurity program. You will develop strategy, oversee staff and policy enforcement, and align security with business and IT goals.

You'll advise senior management on risk, manage resources and third-party providers, drive security governance across on-premises and cloud, and report progress to the Head of Group IT and executives.

Qualifikationen

• Bachelor's degree and 15+ years in information security with 6+ years in leadership.
• Certifications such as CISSP, CCSP, GIAC, CISA, CISM, CRISC are preferred.
• Strong communication, negotiation, and influencing skills.

Aufgaben

• Provide leadership and advocacy to manage the cybersecurity program.
• Develop and implement the cybersecurity strategy aligned with business goals and IT strategy.
• Oversee staff, infrastructure, policy enforcement, and resources.
• Advise senior management on risk levels and security posture.
• Coordinate with global IT teams and MSSPs; report progress to executives.
• Lead incident response and regulatory compliance efforts.
• Evaluate emerging technologies to enhance security capabilities.

Kenntnisse

Leadership

Risk management

Strategic thinking

Communication

Project management

Negotiation

Integrity

Global experience

Ausbildung

Bachelor's degree

Jobbeschreibung

## Head of Group Information SecurityPresenta candidatura: Kilchberg, Switzerland: Tempo pieno: Offerta pubblicata 2 giorni fa: Data fine: 9 ottobre 2026 (8 giorni rimanenti per candidarsi): JR103662Your main responsibilities will include:* Provide leadership, direction, and advocacy to effectively manage the cybersecurity program.* Develop and implement the agreed cybersecurity strategy in alignment with the business and IT strategy.* Oversee staff, infrastructure, policy enforcement, and/or other resources.* Drive the development of policies & standards and advocate for change that will support new initiatives or required changes and enhancements.* Apply knowledge of risk assessment data of identified threats to decision-making processes.* Acquire and manage the necessary resources, including third party security service providers, to support security goals, and reduce overall organizational risk.* Advise senior management on risk levels and security posture.* Communicate the value of security throughout all levels of the organization's stakeholders.* Monitor threats, conduct investigations, support inquiries, and take preventive measures to improve business resilience.* Develop and provide security guidance for new and existing systems,* applications, and services; this includes weighing business needs, internal governance standards, and third-party compliance requirements.* Partner with subsidiary IT teams to establish and track regional and global priorities for security initiatives.* Provide regular reporting on security initiatives to the Head of Group IT and senior management.* Provide leadership regarding security for assets and data, both on-premises and cloud-based.* Evaluate emerging technologies and product categories to determine where they fill gaps, overlap with existing solutions, or extend capabilities.* Implement and maintain security systems, applications, and services that provide detection, preventions, containment and deterrence mechanisms to protect corporate data.* Lead the selection, testing, and deployment of new security solutions.* Document security requirements by evaluating business needs, internal governance standards, and third-party & customer compliance requirements.* Manage relationships with existing and future managed security service providers (MSSPs) that contribute to the portfolio of security services.* Manage and coordinate response to security incidents.* Facilitate compliance with audit, legal, regulatory, and customer contract requirements.* Analyse and evaluate security operations to identify risks or opportunities for improvement.**Your profile:*** The position requires a Bachelor's degree and at least fifteen (15) years of related experience with a minimum of six (6) years of technical experience in one or* more of the following: computer and network security, cloud-based security* architecture, vulnerability testing, intrusion detection/prevention, security* monitoring and event correlation, or computer forensic analysis.* Relevant Information Security certifications (ex. CISSP, CCSP, GIAC, MCSE, CEH, CHFI, CISA, CISM, CRISC, etc.)* Highly-developed communications skills (written/verbal) and interpersonal savvy* Results/action-orientation; project management skills.* Organizational and political agility; developed negotiation and influence skills.* Unquestionable personal code of ethics, integrity, diversity and trust.* Able to successfully navigate within varying degrees of ambiguity in a fast-paced environment.* Prior experience working in a global, decentralized organization.* Extensive knowledge of cybersecurity principles.* Extensive knowledge of cyber threats and vulnerabilities.* Skill in de-conflicting cyber operations and activities.