Cyber GRC Specialist: Audit, Compliance & Risk

Sigma Suisse; Genf; On-site; CHF 120,000 - 180,000; Full time

Job summary

Sigma Suisse, based in Plan-les-Ouates, is a recruitment firm specialising in IT and strategic profiles in French-speaking Switzerland. We seek a Cyber GRC Specialist for a full-time role to ensure group-wide cyber compliance across affiliates and to drive security posture.

The ideal candidate brings 5+ years in cybersecurity with hands-on auditing, governance, risk management and strong regulatory knowledge, including NIS2 and ISO 27001. Travel to sites may be required.

Qualifications

• Minimum 5 years of cybersecurity experience with hands-on auditing, governance and risk.
• Background in cyber audit or consulting (Big4) followed by IT risk in regulated environments.
• Solid understanding of NIS2, CIS Controls, NIST and ISO 27001.

Responsibilities

• Ensure compliance with applicable laws, regulations and standards.
• Develop, enforce and update security policies, standards and procedures.
• Monitor adherence to security guidelines and conduct risk assessments.
• Track risk exposure and report to management; lead internal audits.
• Audit third parties and maintain vendor security inventories.
• Design security awareness initiatives and coordinate with HR on lifecycle security.

Skills

Cybersecurity

Governance

Risk management

Auditing

Regulatory knowledge

NIS2

CIS Controls

NIST SP 800-53

NIST CSF

ISO 27001

CRISC or CISA

Job description

Sigma Suisse, based in Plan-les-Ouates, is a recruitment firm specialising in IT and strategic profiles in French-speaking Switzerland. We seek a Cyber GRC Specialist for a full-time role to ensure group-wide cyber compliance across affiliates and to drive security posture.

The ideal candidate brings 5+ years in cybersecurity with hands-on auditing, governance, risk management and strong regulatory knowledge, including NIS2 and ISO 27001. Travel to sites may be required.