Bring innovation to life

Objective of the position

A Security Analyst at Ivoclar plays a pivotal role in defining and implementing robust IT security processes and standards.

This role actively contributes to project activities, participating in conceptual security design, overseeing security compliance, risk management, incident response and the development of mitigation strategies.

This role is instrumental in enhancing IT services' security and ensuring the protection of all global systems, applications, and infrastructure.

Your role

Responsibilities

·       Security Processes & Standards: Define, implement, and continuously improve IT security processes, standards, policies, and guidelines, aligned with industry frameworks (e.g., ISO 27001, NIST CSF).

·       Project Support & Leadership: Provide guidance and leadership in integrating security best practices into projects and manage business and IT projects with a focus on security.

·       Risk Management: Identify, assess, and mitigate security risks, vulnerabilities, and issues, and initiate countermeasures and improvements.

·       Security Compliance & Oversight: Ensure ongoing compliance with security policies and standards, conduct security risk assessments, and monitor corporate-wide risk status.

·       Security Awareness & Training: Develop, implement and operate security awareness concepts and training programs.

·       Cross-Functional Collaboration: Collaborate with cross-functional teams, global experts, and external suppliers to enhance IT services and security.

·       Incident Management: Manage incident responses, conduct root cause investigations, conduct lessons learned and follow up on further actions.

·       IT security Controls: Research, establish, maintain and audit IT security relevant controls.

·       Technology Evaluation: Evaluate IT security technologies, products, and services.

·       Global IT Scope: Lead the preparation and execution of global IT security processes and services, ensuring security across systems, applications, and infrastructure.

·       Security Intelligence: Act as primary contact with external parties, e.g. vendors, CERTs,  expert groups. Collection of information from relevant parties regarding bug fixes, updates, support, etc.

·       Documentation: Document technical specifications and business processes.

·       Implementation and fulfillment of the safety manual’s requirements

·       Implementation and fulfillment of the personnel handbook’s requirements

·       Implementation and fulfillment of the regulatory requirements

·       Acts as a role model in accordance with the Corporate Values of the Ivoclar Group.

Requirements

Regulatory: See the regulatory target profile of the position in the training management system.

Your profile

Professional

·       Expert knowledge and experience in Information Security concepts, methodologies, technologies and products.

·       Practical experience in IT Security in large enterprises.

·       Strong coordination and communication skills within an international environment.

·       Ability for independent decision-making and issue resolution.

·       Team orientation.

·       Excellent command of English, German is a plus.

·       Security certifications (e.g. CISM, CEH, CISSP …) are an asset.

·       Skills in structured fact-gathering and analytical thinking.

·       Conceptual IT solution design and architecture skills.

·       Skills in documentation and formulation.

·       Advanced project management skills.

·       Communication, coordination and interpersonal skills.

·       Demonstration, visualization, presentation and teaching skills.

·       IT technology or business management (engineering diploma or 3 years of applicable working experience) plus 1 years of applicable working experience.

Personal

·       Team player with the ability to work in a virtual and distributed team.

·       Result-oriented with high contribution level.

·       Customer-friendly and proactive.

·       Communicative and cooperative.

·       Trustworthy, reliable, flexible and resilient.

·       Willingness to provide on-call support and travel internationally.

What we offer

• A global, purpose-driven company with 3,700 employees.
• A culture of innovation and collaboration.
• Learning and development tailored to your growth.
• Attractive benefits.