Security Governance & Risk Associate

AMINA Bank AG; Zug; On-site; CHF 90,000 - 120,000; Full time

Job summary

AMINA Bank AG in Zug seeks an Information Security Associate to help run and improve its ISMS. The role supports day-to-day security governance, risk and control oversight, regulatory and audit activities, and follow-up of actions across the organization.

You will work closely with the CISO and colleagues in Risk, Compliance, Legal, Technology, Operations, and business. The role requires good judgment, clear writing, and the confidence to follow up on open points while contributing to the

Qualifications

• Up to 3 years of experience in Information Security, Cybersecurity, Risk Management, IT Audit, Compliance, Technology Governance, or a related field.
• Strong written and verbal English communication skills.
• Understanding of information security governance, risk management, compliance, and regulatory requirements.
• Strong analytical, organizational, and problem-solving skills with the ability to manage multiple priorities.
• Proficiency with AI-powered productivity tools (e.g., Microsoft Copilot, ChatGPT) and an understanding of responsible AI usage.

Responsibilities

• Support and enhance the Information Security Management System (ISMS) by maintaining security governance frameworks, policies, standards, and controls, ensuring alignment with regulatory, compliance, and business requirements.
• Coordinate security risk and control oversight activities by supporting risk assessments, monitoring remediation plans, validating control effectiveness, and providing management reporting to strengthen the organization's security posture.
• Drive compliance and assurance initiatives through the coordination of internal and external audits, regulatory reviews, evidence collection, and tracking of findings to ensure timely closure of identified gaps and control weaknesses.
• Partner with the CISO/DPO and cross‑functional stakeholders to support data protection and privacy programs, including DPIAs, technical and organizational measure (TOM) assessments, incident follow‑up, and the protection of sensitive and personal data.
• Facilitate third‑party security and due diligence reviews by assessing vendor security controls, certifications, and risk profiles, supporting onboarding decisions, and ensuring remediation of identified security and privacy risks.
• Develop and promote security awareness and communication programs by creating engaging training, guidance materials, and stakeholder communications that foster a strong security‑conscious culture across the organization.
• Maintain security governance, risk, and compliance reporting by tracking key metrics, action plans, policy exceptions, and risk registers, enabling informed decision‑making and continuous improvement.
• Contribute to the continuous improvement of the Information Security function by supporting strategic security initiatives, researching emerging threats and regulatory developments, and collaborating with business, technology, legal, and compliance teams to strengthen organizational resilience.

Skills

Information Security

English communication

Analytical skills

Governance & compliance

AI tools

Education

Bachelor's degree in Information Security / Cybersecurity / CS

Tools

Microsoft Copilot

ChatGPT

Job description

AMINA Bank AG in Zug seeks an Information Security Associate to help run and improve its ISMS. The role supports day-to-day security governance, risk and control oversight, regulatory and audit activities, and follow-up of actions across the organization.

You will work closely with the CISO and colleagues in Risk, Compliance, Legal, Technology, Operations, and business. The role requires good judgment, clear writing, and the confidence to follow up on open points while contributing to the