ICT Change Manager

Project overview

For deployment with our client in Zurich, we are looking for an ICT Change Manager

Responsibilities

• Formulate program mandate and scope, including:
• Which risks should Zero Trust specifically address?
• Which business outcomes are targeted (e.g., reduction of specific risk categories, improvement of detection and response capabilities)?
• What is explicitly not part of the program?
• Set up governance and decision-making model, including:
• Sponsor and Steering Committee,
• Architecture bodies / Architecture Authority,
• Involvement of Risk, Compliance, Data Protection, Audit,
• Responsibilities of platforms and applications, escalation paths, and decision-making processes.
• Link regulatory requirements with the Zero Trust program,
• without turning the program into a pure compliance project. In particular, reference to FINMA/ DORA (including Governance, ICT Risk
• Management, Protection/Prevention, Detection, Resilience Testing, Third-Party Risk) as well as relevant regulation.
• Orchestrate capability and maturity assessments and derive target maturity levels together with the architects:
• risk-based, depending on the criticality of business processes and assets, consciously not "maximum Zero Trust" everywhere, but appropriate target levels.
• Develop the roadmap, including:
• Phases/Waves and milestones (first technical foundations, then prioritized use cases, then scaling),
• Dependencies on existing programs (IAM, Cloud, Network, Endpoint, Application Modernization).
• Define a measurement model / KPI set that goes beyond tool counting, e.g.:
• Proportion of context-based authorized accesses,
• Coverage of strong authentication,
• Securing privileged access,
• Handling of unmanaged devices,
• Governance of service identities,
• Degree of segmentation or quality of policy enforcement.
• Prepare a scaling model for the overall program:
• required workstreams and roles,
• Budget and resource estimation,
• Use of internal teams and external partners/vendors,
• Transition from the initial "seed" to a full-fledged Zero Trust program with broad implementation responsibility.

Requirements

• Must: Several years of experience in banks or similarly highly regulated financial institutions at the interface of Cyber Security, IT Risk, and IT Governance, including leading large transformation initiatives.
• Must: Sound technical understanding of Zero Trust principles and the ability to translate them into risk- and outcome-oriented program goals, roadmaps, and governance structures.
• Must: Strong communication and stakeholder skills to prepare complex security topics understandably for business, non-security IT, and management (fluent German and English).
• Can: Concrete experience in managing Zero Trust programs and/or DORA/EU regulatory implementation projects in the financial sector.
• German: C1 – Professional use of language
• English: C1 – Professional use of language – Advanced (CAE)
• No subcontracting allowed!

Project details

November 23, 2026

End: February 29, 2028

100%

Zurich and remote (only within Switzerland)

Find out about your opportunities with Mr. Patrick Casutt or send us your CV directly by email to *@*.com. We look forward to hearing from you.

We refer to our data protection regulations (see at www.profilogic.com).

• Start: 2026-11
• Duration: 15 Monate
• Remote: hybrid
• Location: Zürich, Schweiz, CH
• Languages: German