Head of Group Information Security

Lindt & Sprüngli (International) AG; Kilchberg; Vor Ort; CHF 200.000 - 320.000; Vollzeit

Zusammenfassung

Lindt & Sprüngli Group seeks a seasoned cybersecurity leader to direct the global security program, aligning risk, policy, and technology with business strategy. You will oversee security governance, incident response, and cloud/on-prem safeguards, while guiding regional IT teams and MSSPs.

The role demands extensive experience across threat management, risk assessment, and stakeholder communication in a multinational environment.

Qualifikationen

• Bachelor's degree and 15+ years in information security.
• Minimum 6 years of technical security experience in cloud, network security, or related areas.
• Certifications such as CISSP, CCSP, GIAC, CISA, CISM, CRISC preferred.
• Strong communication and project management skills.
• Experience in a global decentralized organization.
• Ability to navigate ambiguity in a fast-paced environment.

Aufgaben

• Provide leadership, direction, and advocacy to effectively manage the cybersecurity program.
• Develop and implement the agreed cybersecurity strategy aligned with business/IT strategy.
• Oversee staff, infrastructure, policy enforcement, and resources.
• Drive development of policies & standards and advocate for changes.
• Apply risk assessment data to decision-making processes.
• Acquire/manage resources, including third-party providers, to reduce risk.
• Advise senior management on risk levels and security posture.
• Communicate the value of security to stakeholders at all levels.
• Monitor threats, conduct investigations, and support inquiries.
• Develop security guidance for new/existing systems and services.
• Partner with regional/global IT teams to align priorities.
• Provide regular reporting on security initiatives to Head of Group IT.
• Lead security for assets/data both on-premises and in the cloud.
• Evaluate emerging technologies to fill gaps or extend capabilities.
• Implement/maintain security systems and deployment of new solutions.
• Document security requirements considering governance and third-party needs.
• Manage relationships with MSSPs and security providers.
• Coordinate response to security incidents.
• Ensure compliance with audits, regulatory, and customer contracts.
• Analyze security operations to identify risks or improvement opportunities.

Kenntnisse

Leadership

Strategic planning

Risk management

Incident response

Security governance

Threat intelligence

Communication skills

Negotiation

Policy development

Ausbildung

Bachelor's degree

Jobbeschreibung

Job responsibilities

• Provide leadership, direction, and advocacy to effectively manage the cybersecurity program.
• Develop and implement the agreed cybersecurity strategy in alignment with the business and IT strategy.
• Oversee staff, infrastructure, policy enforcement, and/or other resources.
• Drive the development of policies & standards and advocate for change that will support new initiatives or required changes and enhancements.
• Apply knowledge of risk assessment data of identified threats to decision-making processes.
• Acquire and manage the necessary resources, including third party security service providers, to support security goals, and reduce overall organizational risk.
• Advise senior management on risk levels and security posture.
• Communicate the value of security throughout all levels of the organization’s stakeholders.
• Monitor threats, conduct investigations, support inquiries, and take preventive measures to improve business resilience.
• Develop and provide security guidance for new and existing systems, applications, and services; this includes weighing business needs, internal governance standards, and third-party compliance requirements.
• Partner with subsidiary IT teams to establish and track regional and global priorities for security initiatives.
• Provide regular reporting on security initiatives to the Head of Group IT and senior management.
• Provide leadership regarding security for assets and data, both on-premises and cloud-based.
• Evaluate emerging technologies and product categories to determine where they fill gaps, overlap with existing solutions, or extend capabilities.
• Implement and maintain security systems, applications, and services that provide detection, preventions, containment and deterrence mechanisms to protect corporate data.
• Lead the selection, testing, and deployment of new security solutions.
• Document security requirements by evaluating business needs, internal governance standards, and third-party & customer compliance requirements.
• Manage relationships with existing and future managed security service providers (MSSPs) that contribute to the portfolio of security services.
• Manage and coordinate response to security incidents.
• Facilitate compliance with audit, legal, regulatory, and customer contract requirements.
• Analyse and evaluate security operations to identify risks or opportunities for improvement.

Your profile

• The position requires a Bachelor's degree and at least fifteen (15) years of related experience with a minimum of six (6) years of technical experience in one or more of the following: computer and network security, cloud-based security architecture, vulnerability testing, intrusion detection/prevention, security monitoring and event correlation, or computer forensic analysis.
• Relevant Information Security certifications (ex. CISSP, CCSP, GIAC, MCSE, CEH, CHFI, CISA, CISM, CRISC, etc.)
• Highly-developed communications skills (written/verbal) and interpersonal savvy.
• Results/action-orientation; project management skills.
• Organizational and political agility; developed negotiation and influence skills.
• Able to successfully navigate within varying degrees of ambiguity in a fast-paced environment.
• Prior experience working in a global, decentralized organization.
• Extensive knowledge of cybersecurity principles.
• Extensive knowledge of cyber threats and vulnerabilities.
• Skill in de-conflicting cyber operations and activities.

Unquestionable personal code of ethics, integrity, diversity and trust.

Looking to grow your career in a dynamic, international setting? Join the Lindt & Sprüngli Group! Together, we thrive to achieve our bold ambitions, powered by our purpose and unique culture of community and mutual support – rooted in a proud tradition, yet always evolving to stay ahead and set new standards. Across our diverse local teams, we think globally and act locally – empowering people to grow, take ownership and shape a sustainable future together. We are a responsible “employer of choice” who provides an inspiring people experience. Together, we build trust, drive innovation, and grow – as individuals and as a business. Lindt & Sprüngli has been enchanting the world with chocolate for over 180 years. The long-established Swiss company with its roots in Zurich is a global leader in the premium chocolate category. Lindt & Sprüngli produces quality chocolates today at its 12 factories in Europe and the USA. Its products are sold by 41 subsidiaries and branch offices in around 620 of its own stores as well as via a network of around 100 distributors around the globe. With around 15,500 employees, the Lindt & Sprüngli Group reported sales of CHF 5.92 billion in 2025. Our commitment to contributing to a sustainable tomorrow is a key element driving the company’s actions and ambitions. Since 2008, the Lindt & Sprüngli Farming Program has been our Responsible Sourcing Standard for cocoa.