Information Security and Data Privacy Leader

IKEA; Zürich; On-site; CHF 140,000 - 210,000; Full time

Benefits offered by this job

28 vacation days

8 weeks parental leave (fathers)

20 weeks parental leave (mothers)

Very attractive social benefits

15% staff discount

Travel ticket reimbursement 85-100%

Free parking

LinkedIn Learning access

Canteen meals CHF 4.50 / 3.50

Bonus payments

Job summary

IKEA in Switzerland is seeking an Information Security and Data Privacy Leader to safeguard data assets, align security and privacy with business objectives, and drive risk-based decisions.

You will work across functions in Zurich to implement strategy, promote Privacy by Design, manage incidents, and ensure regulatory compliance under FADP and GDPR.

Qualifications

• Five+ years of direct data protection legislation experience.
• Practical IT security experience.
• Expert knowledge of Swiss and European data protection law (FADP & GDPR).
• Familiarity with ISO 27001 and NIST Cybersecurity Framework.
• CIPP/E, CIPM or equivalent certification is highly preferred.
• Translate legal requirements into practical business solutions.
• Strong communication and stakeholder management in English and German.
• Data management experience is a plus.

Responsibilities

• Implement the Group Information Security and Data Privacy strategy in Switzerland.
• Promote Privacy by Design and Default across processes and projects.
• Advise stakeholders from senior management to IT on risks and controls.
• Lead incident management and liaison with regulators as required.
• Maintain Records of Processing Activities (RoPA) with stakeholders and ensure DPAs with suppliers.
• Coordinate individual rights requests within applicable timelines.

Skills

Information security

Data privacy

Privacy by Design

Risk management

Communication / influence

ISO 27001

NIST CSF

English & German

Education

CIPP/E or CIPM certification

Job description

Information Security and Data Privacy Leader

\"You care about making a positive impact in the world. You understand greatness requires thinking differently. An inclusive and accepting work environment is important to you.\"

A job at IKEA is so much more than home furnishings. Together, we work to make a better everyday life for the many. It's the perfect fit if you want to contribute, grow, and share. Join the team and start a better life for yourself."

You are passionate about helping the organisation understand the value Information Security and Data Privacy bring to business objectives, and about protecting country information assets, especially data. You use your expertise to address privacy and security risks, support responsible use of data, and keep up to date with changing legislation and emerging methods. You live and share IKEA's culture and values.

You have at least five years' experience working directly with data protection legislation, including projects or programmes, and practical experience in IT security. You have expert knowledge of Swiss and European data protection law, including the Swiss Federal Act on Data Protection (FADP) and GDPR, and can translate legal requirements into practical business solutions. You understand relevant industry standards, such as ISO 27001 and the NIST Cybersecurity Framework, and the controls needed to support compliance. A CIPP/E, CIPM or equivalent certification is highly expected.

You can identify, assess, prioritise and communicate information security and privacy risks; advise on proportionate mitigating controls; and apply a risk based approach to business decisions. You communicate clearly, and can influence, advise and challenge stakeholders, from senior management to IT and operational teams. Experience in broader data management is an advantage. You are aware of emerging technology risks, including AI, cloud services and automation, and their implications for security and privacy. You have strong English and good German.

Your responsibilities

You will implement the Group Information Security and Data Privacy strategy and common Group Digital goals in Switzerland, supporting compliance with IKEA requirements and applicable laws. You will promote a Privacy by Design culture and help information and business process owners integrate Privacy by Design and Privacy by Default principles, along with security and privacy requirements, into their procedures and solutions.

• Partner with the business Advise and support the organisation in embedding Security and Privacy by Design and Privacy by Default into processes, projects, products and digital solutions from the outset.


• Lead incident management Be accountable for the local Information Security and Data Privacy incident management process, including escalations, decision material, and support for contact with local regulators and affected individuals as required.


• Maintain processing records Develop, maintain and regularly review the Records of Processing Activities (RoPA) with relevant stakeholders, documenting processing purposes, personal data categories and flows, recipients, retention periods and applicable safeguards.


• Oversee supplier risk Ensure key and critical local suppliers are identified, assessed for risk and appropriately onboarded. Confirm that required contractual safeguards, including Data Processing Agreements (DPAs) where applicable, are in place before relevant processing begins, and that suppliers are monitored and periodically reassessed throughout the relationship.


• Coordinate individual rights requests Ensure the process for individual rights requests is followed and requests, such as access, deletion and correction, are coordinated and answered within applicable requirements and timelines.

You could think that we have supernatural powers, but the truth is that our team is really great at putting our insights together to detect potential risks early on. We're a diverse group of people who work together to protect and strengthen the IKEA brand through our laser focus on risk management, data protection, compliance, business operations, health and safety. Thanks to us our assets, co-workers, visitors and customers can feel safe. At least we think that’s pretty cool!

Good to know

We mentioned earlier that we want our employees to be happy and healthy.

It also means saying 'thank you'!

Our way of saying thank you:

• 28 vacation days (based on a 100% workload)


• 8 weeks paid parental leave for fathers; 20 weeks paid parental leave for mothers


• Very attractive social benefits


• 15% staff discount on your purchase - in every Swiss IKEA store


• You would rather travel to work by public transport? We pay between 85% and 100% of your yearly travel ticket


• Free parking facilities


• Unlimited access to the LinkedIn learning platform


• Affordable and healthy meals in our staff canteen (CHF 4.50 for meat dishes and CHF 3.50 for veggie dishes)


• Bonus payments for all employees

There are many opportunities for career development at IKEA. We encourage and support our employees to try out different roles, move between functions or even go abroad.