Information Security Consultant

Nicoll Curtin; Zürich; On-site; CHF 140,000 - 190,000; Full time

Job summary

Nicoll Curtin is seeking an experienced Information Security GRC Lead to own the governance framework and drive ISO 27001-certified security across multiple business entities. You will work with senior stakeholders to strengthen risk management, ensure regulatory compliance, and support ongoing security improvements throughout the organization.

Key responsibilities include leading ISMS rollout and maintenance, overseeing ISO 27001 initiatives, and managing audits and certification activities.

Qualifications

• 5+ years in information security, governance, risk, or compliance.
• Proven ISO 27001 implementation or certification experience.
• ISO 27001 Lead Implementer or Lead Auditor preferred.
• Strong project and program management capabilities.

Responsibilities

• Lead ISMS rollout, enhancement, and ongoing management.
• Oversee ISO 27001 compliance across units.
• Identify, assess, and monitor information security risks.
• Design and maintain security policies, controls, governance docs.
• Manage internal and external audits and certification activities.
• Establish governance structures, risk registers, reporting frameworks, and compliance metrics.
• Present risk, compliance, and project updates to executive leadership and senior management.

Skills

Information Security

GRC

ISO 27001

Risk Management

Audits

Job description

We are seeking an experienced Information Security IT Governance, Risk & Compliance (GRC) Lead to take ownership of our client's information security governance framework and drive the continued development of our ISO 27001-certified environment across multiple business entities. In this strategic position, you will work closely with senior stakeholders to strengthen risk management practices, ensure regulatory compliance, and support ongoing security improvements throughout the organization.

Key Responsibilities

• Lead and coordinate the rollout, enhancement, and ongoing management of the Information Security Management System (ISMS).
• Oversee ISO 27001 compliance initiatives across various business units and group companies.
• Identify, assess, and monitor information security and IT-related risks, ensuring effective mitigation strategies are implemented.
• Design, review, and maintain security policies, procedures, controls, and governance documentation.
• Manage internal and external audits, certification activities, and compliance assessments.
• Establish and maintain governance structures, risk registers, reporting frameworks, and compliance metrics.
• Prepare and present risk, compliance, and project updates to executive leadership and senior management.

Requirements:

• At least 5 years of experience in Information Security, IT Governance, Risk Management, or Compliance.
• Demonstrated success in delivering ISO 27001 implementation, certification, or continuous improvement programs.
• ISO 27001 Lead Implementer, Lead Auditor, or comparable certification preferred.
• Strong project and program management capabilities with the ability to manage multiple initiatives simultaneously.