Work Across
Get started
All jobs
Save

Informationssicherheitsberater

Callista Group AG
Contract type
Freelance
Work mode
Remote · Switzerland
Experience
3 years

Job description

An external information security consultant supports the information security officer of a cantonal government department, ensuring security requirements are systematically reviewed, documented and implemented in projects and business units.

At a glance

Employment
Contract · Independent contractor
Work mode
Remote · Switzerland
Languages
German – fluent

What you'll do

  • Support and train application owners in creating protection needs analyses and ISDS concepts
  • Advise application owners on reaching a defined information security level and formally and substantively review ISDS concepts
  • Review and enforce adequate information security clauses in contracts and liaise with suppliers on supplier selection, contract drafting and pentests
  • Enforce and track measures for vulnerabilities identified in pentests and audits
  • Review the necessity of permissions based on system extracts and raise awareness among affected people
  • Ensure a uniform central repository of security documentation and create and maintain overviews and cockpits on documentation, training, contracts and security gaps
  • Process and track tickets, including splitting complex tickets into subtasks
  • Review the implementation of information security policies and requirements

What we're looking for

  • Long-standing experience in information security and risk management, ideally supplemented by audit experience
  • Several years of practical experience in software development, software procurement or a comparable role with a strong IT focus
  • Completed master's degree in engineering (university of applied sciences or university) or a related field with in-depth technical knowledge
  • Training or further education in business analysis, requirements management, agile development projects and IT service management
  • Solid knowledge of web and desktop applications (web and API, databases, network basics) and practical understanding of technical and organizational information security
  • Ability to explain security requirements in a target-group-appropriate way and to handle conflicts of objectives such as deadline pressure vs. security constructively
  • Responsible, structured and independent working style with high quality standards and enjoyment of collaborating with diverse stakeholders
  • Very good German skills in spoken and written form

Nice to have

  • Knowledge of authentication and authorization (SSO, OpenID Connect, MFA, RBAC), cloud/SaaS, backup & recovery, audit logs, DevSecOps/containers, OT/SCADA, mobile and IoT
  • Knowledge of ISO 27001, BSI IT-Grundschutz, ICT minimum standards or NIST CSF as well as cryptographic methods, BCM and GRC tools

Apply

Save

Direct apply at Callista Group AG

Opens the job posting at Callista Group AG