Global Information Security & Risk Leader

EFG Private Banking; Genf; On-site; CHF 180,000 - 300,000; Full time

Job summary

EFG Private Banking seeks a seasoned leader to manage Group Information Security Management. You will define governance, risk and compliance across entities, aligning with ISO, NIST, COBIT, and DORA, and interact with senior management across jurisdictions.

You will lead a team of information security professionals, steer major change programmes, oversee third-party risk, and ensure budget planning and reporting across multiple jurisdictions.

Qualifications

• Senior information security or ICT risk professional with governance, risk and compliance experience in financial services.
• At least 15 years in information security/ICT risk with regulated environments.
• Proven leadership of cross-functional security initiatives.
• Experience managing teams (3-7 direct reports) and matrix leadership.
• Experience in large change programmes (DORA, ICT risk) and budget responsibility.

Responsibilities

• Define and lead Group information security governance framework across ISO/NIST/COBIT.
• Oversee ICT risk management and DORA-driven activities at Group level.
• Monitor the information security control plan and risk indicators.
• Lead change and transformation programmes like DORA implementation.
• Oversee Third Party Risk Management assessments and remediation.
• Provide leadership to local CISOs and Information Security Officers.
• Prepare and present information security reports to senior management.
• Coordinate information security budgets and PMO.
• Collaborate with IT, Compliance, Audit and operations.
• Promote a strong risk and security culture.

Skills

Leadership

Team management

Stakeholder management

Regulatory compliance

Education

Master’s degree in Information Security / related field

Advanced degree (Master’s or PhD) in Information Security / Information Risk

Job description

EFG Private Banking seeks a seasoned leader to manage Group Information Security Management. You will define governance, risk and compliance across entities, aligning with ISO, NIST, COBIT, and DORA, and interact with senior management across jurisdictions.

You will lead a team of information security professionals, steer major change programmes, oversee third-party risk, and ensure budget planning and reporting across multiple jurisdictions.