Information Security and Data Privacy Leader

IKEA; Spreitenbach; On-site; CHF 120,000 - 165,000; Full time

Benefits offered by this job

Vacation days

Parental leave (paternity)

Staff discount

Travel reimbursement

Parking

Learning platform access

Meal subsidies

Bonus payments

Job summary

IKEA in Switzerland seeks a seasoned Information Security and Data Privacy leader to implement the group strategy locally. You will embed Privacy by Design and security by default across processes, projects and digital solutions, working with business units, IT, and governance teams.

You will manage incidents, maintain RoPA, and coordinate with regulators while driving risk-based controls. Excellent English and German are required, and Swiss-focused expertise is essential.

Qualifications

• At least five years' experience with data protection laws including GDPR and FADP.
• Expert knowledge of Swiss/EU data protection law and applicable standards.
• CIPP/E or CIPM or equivalent certification is highly expected.
• Strong English and good German.

Responsibilities

• Implement IKEA's Group Information Security and Data Privacy strategy in Switzerland.
• Promote Privacy by Design across processes, projects, products and digital solutions.
• Lead incident management and support regulators and affected individuals as required.
• Maintain RoPA records and ensure data processing transparency with stakeholders.
• Oversee supplier risk and ensure DPAs where applicable and ongoing monitoring.

Skills

Data protection

Information security

Risk management

Stakeholder management

Privacy by Design

English proficiency

German proficiency

Education

CIPP/E or CIPM certification

Tools

ISO 27001

NIST CSF

Job description

Who you are

You are passionate about helping the organisation understand the value Information Security and Data Privacy bring to business objectives, and about protecting country information assets, especially data. You use your expertise to address privacy and security risks, support responsible use of data, and keep up to date with changing legislation and emerging methods. You live and share IKEA's culture and values.

You have at least five years' experience working directly with data protection legislation, including projects or programmes, and practical experience in IT security. You have expert knowledge of Swiss and European data protection law, including the Swiss Federal Act on Data Protection (FADP) and GDPR, and can translate legal requirements into practical business solutions. You understand relevant industry standards, such as ISO 27001 and the NIST Cybersecurity Framework, and the controls needed to support compliance. A CIPP/E, CIPM or equivalent certification is highly expected.

You can identify, assess, prioritise and communicate information security and privacy risks; advise on proportionate mitigating controls; and apply a risk based approach to business decisions. You communicate clearly, and can influence, advise and challenge stakeholders, from senior management to IT and operational teams. Experience in broader data management is an advantage. You are aware of emerging technology risks, including AI, cloud services and automation, and their implications for security and privacy. You have strong English and good German.

Your responsibilities

You will implement the Group Information Security and Data Privacy strategy and common Group Digital goals in Switzerland, supporting compliance with IKEA requirements and applicable laws. You will promote a Privacy by Design culture and help information and business process owners integrate Privacy by Design and Privacy by Default principles, along with security and privacy requirements, into their procedures and solutions.

• Partner with the business Advise and support the organisation in embedding Security and Privacy by Design and Privacy by Default into processes, projects, products and digital solutions from the outset.
• Lead incident management Be accountable for the local Information Security and Data Privacy incident management process, including escalations, decision material, and support for contact with local regulators and affected individuals as required.
• Maintain processing records Develop, maintain and regularly review the Records of Processing Activities (RoPA) with relevant stakeholders, documenting processing purposes, personal data categories and flows, recipients, retention periods and applicable safeguards.
• Oversee supplier risk Ensure key and critical local suppliers are identified, assessed for risk and appropriately onboarded. Confirm that required contractual safeguards, including Data Processing Agreements (DPAs) where applicable, are in place before relevant processing begins, and that suppliers are monitored and periodically reassessed throughout the relationship.
• Coordinate individual rights requests Ensure the process for individual rights requests is followed and requests, such as access, deletion and correction, are coordinated and answered within applicable requirements and timelines.

You could think that we have supernatural powers, but the truth is that our team is really great at putting our insights together to detect potential risks early on. We're a diverse group of people who work together to protect and strengthen the IKEA brand through our laser focus on risk management, data protection, compliance, business operations, health and safety. Thanks to us our assets, co-workers, visitors and customers can feel safe. At least we think that's pretty cool!

Good to know

• 28 vacation days (based on a 100% workload)
• 8 weeks paid parental leave for fathers; 20 weeks paid parental leave for mothers
• Very attractive social benefits
• 15% staff discount on your purchase - in every Swiss IKEA store
• You would rather travel to work by public transport? We pay between 85% and 100% of your yearly travel ticket
• Free parking facilities
• Unlimited access to the LinkedIn learning platform
• Affordable and healthy meals in our staff canteen (CHF 4.50 for meat dishes and CHF 3.50 for veggie dishes)
• Bonus payments for all employees