Project Management Officer

Nicoll Curtin; Zürich; Vor Ort; CHF 150.000 - 190.000; Vollzeit

Zusammenfassung

Nicoll Curtin is seeking an experienced Senior IT Governance, Risk & Compliance (GRC) PMO Lead to own the information security governance framework and drive ISO 27001-certified environment improvements across multiple entities.

You will collaborate with senior stakeholders to strengthen risk management, ensure regulatory compliance, and support ongoing security enhancements throughout the organization.

Qualifikationen

• Experience in information security governance, risk, and compliance.
• Proven track record with ISO 27001 implementation, certification, or improvement.
• Certifications such as ISO 27001 Lead Implementer/Auditor are a plus.

Aufgaben

• Lead ISMS rollout, enhancement, and ongoing management.
• Oversee ISO 27001 compliance across units and group companies.
• Identify and monitor information security risks with mitigation strategies.
• Design, review, and maintain security policies, procedures, and governance docs.
• Manage internal and external audits, certifications, and assessments.
• Establish governance structures, risk registers, reporting frameworks, and metrics.
• Present risk, compliance, and project updates to executives.

Kenntnisse

Information Security

IT Governance

Risk Management

Compliance

ISO 27001

Audit & Certification

Project Management

Stakeholder Management

Jobbeschreibung

We are seeking an experienced Senior IT Governance, Risk & Compliance (GRC) PMO Lead to take ownership of our client's information security governance framework and drive the continued development of our ISO 27001-certified environment across multiple business entities. In this strategic position, you will work closely with senior stakeholders to strengthen risk management practices, ensure regulatory compliance, and support ongoing security improvements throughout the organization.

Key Responsibilities

• Lead and coordinate the rollout, enhancement, and ongoing management of the Information Security Management System (ISMS).
• Oversee ISO 27001 compliance initiatives across various business units and group companies.
• Identify, assess, and monitor information security and IT-related risks, ensuring effective mitigation strategies are implemented.
• Design, review, and maintain security policies, procedures, controls, and governance documentation.
• Manage internal and external audits, certification activities, and compliance assessments.
• Establish and maintain governance structures, risk registers, reporting frameworks, and compliance metrics.
• Prepare and present risk, compliance, and project updates to executive leadership and senior management.

Requirements:

• At least 5 years of experience in Information Security, IT Governance, Risk Management, or Compliance.
• Demonstrated success in delivering ISO 27001 implementation, certification, or continuous improvement programs.
• ISO 27001 Lead Implementer, Lead Auditor, or comparable certification preferred.
• Strong project and program management capabilities with the ability to manage multiple initiatives simultaneously.