Information Security Specialist

swissas; Basel; Vor Ort; CHF 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Flexible working hours

Hybrid work model

Flight and travel discount

International environment

Zusammenfassung

Swiss AviationSoftware is seeking an information security professional to guide governance, risk and compliance. You will champion ISO/IEC 27001, SOC 1/2, and act as a security advocate across the organization, ensuring awareness and controls across teams.

The role emphasizes audits, risk advisory, and incident support in a dynamic, international setting. With a master’s degree and CISSP or equivalent, you will collaborate across functions, support customers, and drive improvements in a hybrid

Qualifikationen

• Master’s degree in computer science or related field.
• Professional information security qualifications (CISSP or equivalent).
• Strong experience with ISO/IEC 27001, SOC 1 and SOC 2 frameworks.

Aufgaben

• Partnership with critical teams in terms of infrastructure for audits and assurance subject matters.
• Conduct internal audits and assessments to identify gaps and ensure compliance with internal requirements.
• Monitor technical security controls within GCP cloud environment and internal infrastructure.
• Organize, manage, scope and oversee execution of pentests.
• Guide on vulnerabilities, prioritise fixes by technical severity and business impact.
• Advise on security risk activities affecting information security.
• Manage security issues and findings as part of customer support inquiries.
• Support incident management activities.

Kenntnisse

Information security

Governance

Risk management

Compliance

ISO/IEC 27001

SOC 1/2

CISSP

Auditing

Communication

Interpersonal skills

Ausbildung

Master's degree in computer science

Tools

GCP

Jobbeschreibung

Swiss AviationSoftware is a 100% subsidiary of Lufthansa Technik, and along with our partners in the Digital Tech Ops Ecosystem, leads the digital transformation of the aviation industry in technical asset operation. Swiss AviationSoftware develops, distributes and runs the critical software package AMOS which manages the maintenance, engineering and logistics requirements of international modern airlines. In order to strengthen our leading market position we are looking for dedicated employees who would like to work in a fascinating international environment with more than 230 customers from all over the world.

Are you passionate about information security and have the drive to support and guide your colleagues to help protect the company’s information and information technology assets? We are looking for an independent, dynamic and pragmatic colleague with solid practical technical experience in information / cyber security who is now looking to enrich their daily work with responsibilities in governance, risk and compliance. Your challenge will be to ensure that the certifications ISO/IEC 27001, SOC1 and SOC2 are being kept in close collaboration with our ISO. We expect the candidate to act as advocate for information security and above all support all colleagues to understand how their area is affected in the context of information security.

Tasks

• Partnership with critical teams in terms of infrastructure for audits and assurance subject matters


• Conduct internal audits and assessments to identify gaps and ensure compliance with internal requirements


• Monitor technical security controls within GCP our Cloud environment and our internal infrastructure


• Organize, manage, scope and oversee execution of pentest


• Manage and provide guidance on vulnerabilities, prioritizing them based on technical severity and business impact and further support, including providing technical and operational guidance for remediating identified findings


• Act as security risk advisor on activities that could affect information security


• Responsible to manage and provide guidance on security issues and findings as part of the customer support inquiries


• Support with Incident Management

Skills

• Master degree in computer science


• Industry recognized security qualifications such as CISSP (or equivalent) etc. (CISSP or equivalent of advantage)


• Sound knowledge and experience with ISO/IEC 27001, SOC 1 and or SOC2 compliance requirements certifications


• Proven track record of contributing to or implementing previous ISMSimplementations, ideally aligned with ISO/IEC 27001.


• At least 5 years of experience in a position similar to the described one


• Excellent understanding and practical experience in all aspects of information security and IT security


• Very strong communication skills and expert in building connections.


• Ability and comfort in interacting with colleagues at all levels


• High level of integrity

What we offer

• Working in an open and cooperative environment with a motivated and friendly team


• Flexible working hours (flex time model)


• Hybrid work model


• Flight and travel discount


• Excellent working conditions in pleasant surroundings


• Good professional and personal development opportunities


• Highly appealing pension fund scheme/retirement savings plan


• An international work environment with people from around the globe

Workplace & Culture

This is the environment where your meaningful work impacts our customers, our communities and everyone who experiences AMOS. You develop technical skills, increase your knowledge about aviation and new technologies, meet different cultures, and always be yourself. Your work significantly impacts people's lives, technically and as human beings, and contributes to the formation of our future. In addition, you can be part of a fantastic multicultural and international team with a family spirit. We love to travel, laugh, work, be creative, play sports, and, last but not least, do our best work together.