Head of Group Information Security

Lindt-; Kilchberg; Vor Ort; CHF 180.000 - 260.000; Vollzeit

Zusammenfassung

Lindt- is seeking a seasoned Chief Information Security Officer to lead the cybersecurity program and develop the strategy in line with our business and IT goals. The role oversees policy, staff, and security operations across on‑premises and cloud environments, balancing risk with business needs in a global, decentralized organization.

Ideal candidates bring 15+ years of experience, CISSP/CCSP or similar certifications, and exceptional communication and negotiation skills to influence

Qualifikationen

• Bachelor's degree required in a relevant field or equivalent experience.
• Fifteen years of related experience with at least six years in technical security roles.

Aufgaben

• Provide leadership, direction, and advocacy to effectively manage the cybersecurity program.
• Develop and implement cybersecurity strategy aligned with business and IT strategy.
• Oversee staff, infrastructure, policy enforcement, and resources.
• Drive development of policies and standards and advocate for change.
• Advise senior management on risk levels and security posture.
• Communicate the value of security to stakeholders at all levels.
• Monitor threats, conduct investigations, and improve business resilience.
• Develop security guidance for new and existing systems and services.
• Partner with regional IT teams to track security priorities.
• Provide regular reporting on security initiatives to Head of Group IT.
• Lead security for assets and data, on‑premises and cloud.
• Evaluate emerging technologies and product categories for gaps and extensions.
• Implement and maintain security systems for detection, prevention, containment and deterrence.
• Lead selection, testing, and deployment of new security solutions.
• Document security requirements and ensure third‑party and customer compliance.
• Manage MSSPs and security service portfolios.
• Coordinate response to security incidents and audits.

Kenntnisse

Cybersecurity

Risk assessment

Policy enforcement

Incident response

Cloud security

Stakeholder management

Governance

Communication skills

Project management

Ausbildung

Bachelor's degree

Tools

N/A

Jobbeschreibung

Your main responsibilities will include:Provide leadership, direction, and advocacy to effectively manage the cybersecurity program.Develop and implement the agreed cybersecurity strategy in alignment with the business and IT strategy.Oversee staff, infrastructure, policy enforcement, and/or other resources.Drive the development of policies & standards and advocate for change that will support new initiatives or required changes and enhancements.Apply knowledge of risk assessment data of identified threats to decision-making processes.Acquire and manage the necessary resources, including third party security service providers, to support security goals, and reduce overall organizational risk.Advise senior management on risk levels and security posture.Communicate the value of security throughout all levels of the organization's stakeholders.Monitor threats, conduct investigations, support inquiries, and take preventive measures to improve business resilience.Develop and provide security guidance for new and existing systems,applications, and services; this includes weighing business needs, internal governance standards, and third-party compliance requirements.Partner with subsidiary IT teams to establish and track regional and global priorities for security initiatives.Provide regular reporting on security initiatives to the Head of Group IT and senior management.Provide leadership regarding security for assets and data, both on-premises and cloud-based.Evaluate emerging technologies and product categories to determine where they fill gaps, overlap with existing solutions, or extend capabilities.Implement and maintain security systems, applications, and services that provide detection, preventions, containment and deterrence mechanisms to protect corporate data.Lead the selection, testing, and deployment of new security solutions.Document security requirements by evaluating business needs, internal governance standards, and third-party & customer compliance requirements.Manage relationships with existing and future managed security service providers (MSSPs) that contribute to the portfolio of security services.Manage and coordinate response to security incidents.Facilitate compliance with audit, legal, regulatory, and customer contract requirements.Analyse and evaluate security operations to identify risks or opportunities for improvement.Your profile:The position requires a Bachelor's degree and at least fifteen (15) years of related experience with a minimum of six (6) years of technical experience in one ormore of the following: computer and network security, cloud-based securityarchitecture, vulnerability testing, intrusion detection/prevention, securitymonitoring and event correlation, or computer forensic analysis.Relevant Information Security certifications (ex. CISSP, CCSP, GIAC, MCSE, CEH, CHFI, CISA, CISM, CRISC, etc.)Highly-developed communications skills (written/verbal) and interpersonal savvyResults/action-orientation; project management skills.Organizational and political agility; developed negotiation and influence skills.Unquestionable personal code of ethics, integrity, diversity and trust.Able to successfully navigate within varying degrees of ambiguity in a fast-paced environment.Prior experience working in a global, decentralized organization.Extensive knowledge of cybersecurity principles.Extensive knowledge of cyber threats and vulnerabilities.Skill in de-conflicting cyber operations and activities.