Information Security Associate

Amina Group; Zug; On-site; CHF 90,000 - 120,000; Full time

Job summary

AMINA Bank AG in Zug seeks an Information Security Associate to help run and improve its ISMS. The role supports day-to-day security governance, risk and control oversight, regulatory and audit activities, and follow-up of actions across the organization.

You will work closely with the CISO and colleagues in Risk, Compliance, Legal, Technology, Operations, and business. The role requires good judgment, clear writing, and the confidence to follow up on open points while contributing to the

Qualifications

• Up to 3 years of experience in Information Security, Cybersecurity, Risk Management, IT Audit, Compliance, Technology Governance, or a related field.
• Strong written and verbal English communication skills.
• Understanding of information security governance, risk management, compliance, and regulatory requirements.
• Strong analytical, organizational, and problem-solving skills with the ability to manage multiple priorities.
• Proficiency with AI-powered productivity tools (e.g., Microsoft Copilot, ChatGPT) and an understanding of responsible AI usage.

Responsibilities

• Support and enhance the Information Security Management System (ISMS) by maintaining security governance frameworks, policies, standards, and controls, ensuring alignment with regulatory, compliance, and business requirements.
• Coordinate security risk and control oversight activities by supporting risk assessments, monitoring remediation plans, validating control effectiveness, and providing management reporting to strengthen the organization's security posture.
• Drive compliance and assurance initiatives through the coordination of internal and external audits, regulatory reviews, evidence collection, and tracking of findings to ensure timely closure of identified gaps and control weaknesses.
• Partner with the CISO/DPO and cross‑functional stakeholders to support data protection and privacy programs, including DPIAs, technical and organizational measure (TOM) assessments, incident follow‑up, and the protection of sensitive and personal data.
• Facilitate third‑party security and due diligence reviews by assessing vendor security controls, certifications, and risk profiles, supporting onboarding decisions, and ensuring remediation of identified security and privacy risks.
• Develop and promote security awareness and communication programs by creating engaging training, guidance materials, and stakeholder communications that foster a strong security‑conscious culture across the organization.
• Maintain security governance, risk, and compliance reporting by tracking key metrics, action plans, policy exceptions, and risk registers, enabling informed decision‑making and continuous improvement.
• Contribute to the continuous improvement of the Information Security function by supporting strategic security initiatives, researching emerging threats and regulatory developments, and collaborating with business, technology, legal, and compliance teams to strengthen organizational resilience.

Skills

Information Security

English communication

Analytical skills

Governance & compliance

AI tools

Education

Bachelor's degree in Information Security / Cybersecurity / CS

Tools

Microsoft Copilot

ChatGPT

Job description

Founded in April 2018 and headquartered in Zug, AMINA Bank is a pioneer in the financial industry. In August 2019, AMINA received a Swiss banking and securities dealer license from FINMA. The broad, vertically integrated spectrum of services, combined with the highest security standards, make AMINA’s value proposition unique.

AMINA operates globally from its regulated hubs in Switzerland, Abu Dhabi, and Hong Kong to offer fiat and crypto services to progressive investors, traditional and crypto-native alike, whether individuals, corporates, or institutions.

CVVC Global Report and CB Insights named AMINA as one of the Top 50 Companies within the blockchain ecosystem. Aite Group awarded AMINA their 2021 Digital Wealth Management Impact Innovation Award in the ‘Digital Startup of the Year’ category, and LinkedIn listed AMINA as one of the Top Startups 2021 in Switzerland. In 2022, AMINA won the Digital Assets Offering or Service at the WealthBriefing Swiss EAM Awards, and the bank was also recognised for its product offering SEBAX and won the Best ETP of the Year award at the Swiss ETF Awards 2022. In 2023, AMINA won the European WealthBriefing Award in the Digital Assets Solution, Fund Manager category.

AMINA India is a wholly owned subsidiary of AMINA Bank AG. AMINA India acts as a virtual extension of the bank supporting activities spanning trading & liquidity management, digital assets research, marketing, investment solutions, risk management, account management, mid/back-office, product management, technology & engineering, IT support, finance and human resources.

Your Mission (Should You Choose to Accept It)

AMINA is looking for an Information Security Associate to help run and improve its Information Security Management System (ISMS). The role supports day-to-day security governance, risk and control oversight, regulatory and audit activities, and the follow-up of agreed actions across the organization.

This is a hands-on role for someone at the beginning of their career who enjoys working with both detail and people. The Associate will work closely with the CISO and with colleagues in Risk, Compliance, Legal, Technology, Operations, and business. The role requires good judgment, clear writing, and the confidence to follow up on open points.

Your AMINA To-Do List

• Support and enhance the Information Security Management System (ISMS) by maintaining security governance frameworks, policies, standards, and controls, ensuring alignment with regulatory, compliance, and business requirements.
• Coordinate security risk and control oversight activities by supporting risk assessments, monitoring remediation plans, validating control effectiveness, and providing management reporting to strengthen the organization's security posture.
• Drive compliance and assurance initiatives through the coordination of internal and external audits, regulatory reviews, evidence collection, and tracking of findings to ensure timely closure of identified gaps and control weaknesses.
• Partner with the CISO/DPO and cross‑functional stakeholders to support data protection and privacy programs, including DPIAs, technical and organizational measure (TOM) assessments, incident follow‑up, and the protection of sensitive and personal data.
• Facilitate third‑party security and due diligence reviews by assessing vendor security controls, certifications, and risk profiles, supporting onboarding decisions, and ensuring remediation of identified security and privacy risks.
• Develop and promote security awareness and communication programs by creating engaging training, guidance materials, and stakeholder communications that foster a strong security‑conscious culture across the organization.
• Maintain security governance, risk, and compliance reporting by tracking key metrics, action plans, policy exceptions, and risk registers, enabling informed decision‑making and continuous improvement.
• Contribute to the continuous improvement of the Information Security function by supporting strategic security initiatives, researching emerging threats and regulatory developments, and collaborating with business, technology, legal, and compliance teams to strengthen organizational resilience.

Your golden ticket to the AMINA team:

Required

• Up to 3 years of experience in Information Security, Cybersecurity, Risk Management, IT Audit, Compliance, Technology Governance, or a related field.
• Bachelor's degree in Information Security , Cybersecurity, Computer Science, Information Systems, Risk Management, Business Administration, Law, or a related discipline.
• Strong written and verbal English communication skills .
• Understanding of information security governance, risk management, compliance, and regulatory requirements .
• Strong analytical, organizational, and problem‑solving skills with the ability to manage multiple priorities.
• Proficiency with AI‑powered productivity tools (e.g., Microsoft Copilot, ChatGPT) and an understanding of responsible AI usage.

Preferred

• Experience within banking, financial services, fintech, or other regulated industries .
• Exposure to Microsoft Purview or similar data protection and information governance solutions.
• Certifications such as ISC2 CC, CompTIA Security+, ISO/IEC 27001 Foundation , or equivalent security/compliance credentials.
• Knowledge of data protection, privacy, and third‑party risk management practices.

Personal Attributes

• Curious, proactive, and committed to continuous learning.
• Strong attention to detail with a structured and quality‑focused approach.
• Ability to explain complex security and compliance topics in a clear and practical manner.
• Professional, trustworthy, and comfortable taking ownership while collaborating across teams.
• Demonstrated ability to work effectively with cross‑functional stakeholders to achieve security and governance objectives.

Why We’re Awesome

We owe our exponential growth to our innovative and collaborate team spirit and talented workforce. Every voice counts as we are always committed to learning from diverse perspectives and backgrounds because our people make the difference at AMINA Bank. Regardless of your age, gender, belief, and background, at AMINA EVERYONE is welcome!

Join our skilled team and together redefine finance.