Cyber Security Consultant

Sulzer Ltd; Schweiz; Vor Ort; CHF 90’000 - 120’000; Vollzeit

Zusammenfassung

A leading engineering company, Sulzer Ltd, is seeking a Cyber Security Consultant based in Switzerland. In this role, you'll be responsible for developing and maintaining critical cybersecurity frameworks and policies, ensuring compliance with regulations, and managing third-party security risks. The ideal candidate will possess relevant experience and security certifications, contributing to a diverse and inclusive work environment.

Qualifikationen

• 5-8 years of relevant work experience.
• Proficiency in Windows-based operating systems.
• Knowledge in Security Architecture.

Aufgaben

• Design, implement, and maintain Third-Party Risk Management System.
• Conduct cyber security risk assessments and control framework assessments.
• Support security audits and ensure compliance alignment.

Kenntnisse

Risk Management

Cybersecurity Compliance

Security Architecture

Vulnerability Assessment

Ausbildung

Bachelor’s in Computer Science

Security Certificates (NIST, ISO 27001, etc.)

Jobbeschreibung

Cyber Security Consultant-Full Time-Pune,India

Sulzer is a leading engineering company with a proud heritage of innovation. Join our global team to grow your expertise and develop innovative solutions that enable a prosperous and more sustainable society.

We are looking for a Cyber Security Consultant to join our GF_IT team in India .

Your main tasks and responsibilities:

• Collaborate on the design, implementation, and maintenance of our cutting-edge Third-Party Risk Management System, process and maintain all the landscape of third-party cyber security risks associated with the different solutions and systems. This will require analyzing the vendor and solution posture, having necessary being able to read and interpret data flow and architecture diagrams of the solutions, before implementing them in Sulzer systems.
• Collaborate on the design, implementation, and maintenance of our cutting-edge Information Security Management System (ISMS).
• Contribute to the development and management of all ISMS documentation such as security policies, standards, guidelines, and procedures. Work closely with our team on cyber security compliance exceptions, risks assessments, and GRC tickets, and changes.
• Ensure the compliance alignment of Sulzer with different directives, standards, laws and regulations, with a global scope.
• Perform a continuous monitoring of our policies, standards, directives, guidelines to maintain them aligned with our Cybersecurity Core framework (based on NIST CSF 2.0., IEC 62443 and NIS2 mainly)
• Perform and support to the team in the execution of cyber security risk assessment and control framework assessment, aligning it with industry standards.
• Help in the design of the cyber security and GRC monitoring system, designing KPIs, KRIs, KCIs and other indicators, to evaluate and monitor Sulzer cyber security posture.
• Support cybersecurity audits and assessments from different customers or legal entities.
• Play a key role in disaster recovery reviews, ensuring our systems are resilient and can withstand unforeseen challenges.
• Engage in reviews of vendors, suppliers, as well as contracts, data flow diagrams and questionnaires to guarantee alignment with security standards.
• Conduct Gap analysis (framework vs directives, regulations) to prioritize security initiatives, as well as to check the alignment of the systems, factories, with our cyber security core framework.
• Support and conduct vulnerability scans, reviews, to design remediation plans with the involved stakeholders.
  Collaborate with executives to prioritize regional or global security initiatives, cyber security awareness and training plan and apply risk management methodologies.

To succeed in this role, you will need:

• Bachelor’s in computer science with 5-8 years of relevant work experience.
• Security Certificates in the area of Governance , RISK and Compliance ( Risk Management, NIST Cyber security Framework and Controls, NIS2 Directive, ISO 22301, ISO 27005, ISO 31000, IEC 62443, and other directives and standards (e.g. ISO 27001, GDPR, etc.)
• Proficiency in Windows-based operating systems and networks, with the ability to analyze security issues, detect gaps and security threats.
• Knowledge in Security Architecture, to being able to develop Third-Party Risk Management analysis of the solution.

Sulzer is an equal opportunity employer. We believe in the strength of a diverse workforce and are committed to offering an inclusive work environment.

We are proud to be recognized as a Top Employer 2025 in Brazil, China, Finland, Germany, Ireland, Switzerland, South Africa, the UK and the USA.

About us

Sulzer is a global leader in critical applications for core infrastructure and processes for large essential industries around the world. We ensure the security, quality and durability of critical goods and services by supporting energy security, natural resource management and efficiencies in process industries. This in turn supports the transition to a circular economy. Our integrated solutions add significant value by enabling energy efficiency, carbon emissions and pollution reduction, and process efficiency improvements. Customers benefit from our commitment to innovation, performance and quality through our responsive network of 160 world-class manufacturing facilities and service centers across the globe. Sulzer has been headquartered in Winterthur, Switzerland, since 1834. In 2024, our 13’500 employees delivered revenues of CHF 3.5 billion. Our shares are traded on the SIX Swiss Exchange (SIX: SUN). www.sulzer.com