IT Risk & Security Governance Manager

Project overview

Description

For our client, we are looking for an experienced IT Risk & Security Governance Manager. In this role, you will manage risk, security, and governance topics within a business-critical application portfolio. You will work closely with product owners, DevOps, operations, and security teams and further develop existing processes.

• Consolidation and management of the risk portfolio as well as execution of risk analyses and risk reviews
• Coordination and follow-up of measures for risk minimization
• Management of security, compliance, and governance topics
• Creation of management reports and decision-making bases
• Stakeholder management across operations, security, and delivery teams
• Support of the Product Owner in governance and security issues
• Further development of risk and governance processes

Requirements

• Completed education in computer science, business informatics, information security, or a comparable technical field, or equivalent professional experience
• Several years of experience in IT operations, service management, or DevOps environments
• Practical experience in risk management as well as in the analysis and assessment of technical and organizational risks
• Sound knowledge of information security, security governance, and compliance
• Experience in moderating risk reviews and following up on measures for risk minimization
• Experience in stakeholder management across multiple teams and organizational units
• Ability to structure and present complex technical and organizational issues in a target-group-oriented manner
• Experience in reporting for management and decision-making bodies
• Confident use of Jira and Confluence
• German at least at level B2 and English at least at level B1
• Knowledge of ISO 27001, NIST, COBIT, or comparable frameworks (advantageous)
• Experience with audits, compliance, and regulatory requirements (advantageous)
• Experience in operating business-critical applications in cloud environments (advantageous)
• Understanding of DevOps, SRE, and modern operating models (advantageous)
• Experience in the governance of application portfolios and in complex enterprise environments (advantageous)
• Certifications such as CISSP, CISM, CRISC, or ITIL (advantageous)

Project details

• Start: 2026-10-01
• Duration: 12 Monate ++
• Location: Ittigen, CH
• Languages: German