ISO 27001 Information Security GRC Lead

Nicoll Curtin; Zürich; On-site; CHF 140,000 - 190,000; Full time

Job summary

Nicoll Curtin is seeking an experienced Information Security GRC Lead to own the governance framework and drive ISO 27001-certified security across multiple business entities. You will work with senior stakeholders to strengthen risk management, ensure regulatory compliance, and support ongoing security improvements throughout the organization.

Key responsibilities include leading ISMS rollout and maintenance, overseeing ISO 27001 initiatives, and managing audits and certification activities.

Qualifications

• 5+ years in information security, governance, risk, or compliance.
• Proven ISO 27001 implementation or certification experience.
• ISO 27001 Lead Implementer or Lead Auditor preferred.
• Strong project and program management capabilities.

Responsibilities

• Lead ISMS rollout, enhancement, and ongoing management.
• Oversee ISO 27001 compliance across units.
• Identify, assess, and monitor information security risks.
• Design and maintain security policies, controls, governance docs.
• Manage internal and external audits and certification activities.
• Establish governance structures, risk registers, reporting frameworks, and compliance metrics.
• Present risk, compliance, and project updates to executive leadership and senior management.

Skills

Information Security

GRC

ISO 27001

Risk Management

Audits

Job description

Nicoll Curtin is seeking an experienced Information Security GRC Lead to own the governance framework and drive ISO 27001-certified security across multiple business entities. You will work with senior stakeholders to strengthen risk management, ensure regulatory compliance, and support ongoing security improvements throughout the organization.

Key responsibilities include leading ISMS rollout and maintenance, overseeing ISO 27001 initiatives, and managing audits and certification activities.