Cybersecurity Consultant (Interim/Freelance)

Source Group International; Zug; Hybrid; CHF 166,000 - 240,000; Part time

Job summary

Source Group International in Switzerland is seeking an experienced cybersecurity consultant to strengthen security posture after a partner SSO incident. The role is hybrid in Zug with remote work and occasional on-site presence.

You will review incident analysis, assess Azure cloud security, OAuth2/OIDC/SAML/JWT, API security, and coordinate external penetration testing, ISO 27001 readiness, GDPR compliance, and customer audits. Start ASAP for a 6-8 week engagement, 2-3 days per week.

Qualifications

• 5+ years of experience in Information Security.
• Hands-on experience with Azure Cloud Security and Azure AD.
• Experience with OAuth2/OIDC/SAML/JWT and API security.
• Familiarity with ISO 27001 implementation or auditing and GDPR/Swiss data protection.

Responsibilities

• Review incident analysis, remediation activities, and security gaps.
• Conduct security assessment of platform and cloud environment.
• Define and coordinate external penetration testing activities.
• Support responses to customer security questionnaires and audits.
• Advise on ISO 27001 readiness and data residency requirements.

Skills

Azure Cloud Security

Microsoft Entra ID (Azure AD)

OAuth2, OpenID Connect (OIDC), SAML, (

Education

CISSP

CISM

OSCP

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Job description

Immediate Opportunity for an Experienced Cybersecurity Consultant

We are supporting an innovative Swiss SaaS company that is looking for a seasoned cybersecurity professional to strengthen its security posture following a recently contained security incident related to a partner SSO integration.

This is an ideal engagement for a hands‑on Security Consultant, Security Architect, Cloud Security Specialist, or fractional CISO who enjoys working closely with engineering teams and driving pragmatic security improvements.

Location: Zug (Hybrid) Remote with occasional on-site presence

Start: ASAP

Duration: 6-8 weeks initially

Workload: 2-3 days per week

What You’ll Do

• Review incident analysis, remediation activities, and remaining security gaps
• Conduct a security assessment of the platform and cloud environment
• Evaluate authentication and authorization mechanisms, including OAuth2, OIDC, SAML, JWT, MFA, and partner SSO integrations
• Review API security, secrets management, logging, monitoring, alerting, and cloud security controls
• Assess Azure services including PostgreSQL, Redis, Storage, Private Endpoints, and Defender
• Define and coordinate external penetration testing activities
• Support responses to customer security questionnaires and audits
• Advise on requirements related to ISO 27001, NIST CSF, data residency, audit logging, backup and recovery testing, and customer audit rights
• Develop and prioritize a roadmap toward ISO 27001 readiness

Required Experience

5+ years of experience in Information Security

Strong hands‑on experience with:

• Azure Cloud Security
• Microsoft Entra ID (Azure AD)
• OAuth2, OpenID Connect (OIDC), SAML, JWT
• Web and SaaS application security
• API security
• Incident response and remediation

Experience with:

• ISO 27001 implementation and/or auditing
• Security assessments and customer compliance requirements
• GDPR and Swiss Data Protection Act (nDSG)

Comfortable working directly with engineering teams in a fast-paced environment

Nice to have

• CISSP
• CISM
• OSCP
• ISO 27001 Lead Implementer
• ISO 27001 Lead Auditor

Ideal background

We are particularly interested in professionals who have worked as:

• Security Architect
• Cloud Security Consultant
• Information Security Consultant
• vCISO / Fractional CISO
• Application Security Consultant
• Azure Security Specialist

Experience supporting public sector, transportation, industrial, or regulated customers is highly beneficial.

We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.