IT Security Manager

WORKING RELATIONSHIPS

The position reports to the Group Head of Infrastructure & Security and is based in Crissier, Switzerland. Other working relationships include Group Chief Technology Officer, all members of the IT team, all users worldwide, and external suppliers.

OVERALL PURPOSE

1. Develop and Implement Security Policies: Create and enforce policies and procedures to protect the organization’s information assets from unauthorized access, theft, and other threats.
2. Conduct Risk Assessments: Identify threats and vulnerabilities, evaluate associated risks, and develop strategies to minimize risks and safeguard critical data and systems.
3. Monitor Network and System Security: Oversee network and system security to detect and respond to breaches or incidents, ensuring security controls are effective and operational.
4. Provide Security Training and Awareness: Educate employees on security best practices and their responsibilities for protecting sensitive information, using a constructive and engaging approach.
5. Manage Security Incidents: Lead response efforts to contain and resolve incidents efficiently, coordinating with internal teams and external partners.
6. Lead and Mentor Team Members: Provide leadership, guidance, and mentorship to develop the skills and expertise of the security team.

QUALIFICATIONS AND EXPERIENCE

1. Bachelor’s degree in information security or equivalent experience.
2. Preferred certifications: CISSP, CCSP, GCIH, GSEC, GCFA, and Microsoft SC-100, 200, 300, 400, 500.
3. Extensive experience in information security, spanning architecture and operations.
4. Deep understanding of security technologies, standards, and best practices.
5. Proven leadership ability to build, develop, and inspire high-performing teams.
6. Skilled in creating and enforcing security policies and procedures.
7. Expertise in managing security incidents and conducting risk assessments.
8. Strong knowledge of emerging security threats and technologies.

SKILLS

1. Proficient in English at a business level.
2. Expertise in Microsoft 365, particularly its security features.
3. Extensive experience with SIEM tools like Sentinel or Splunk.
4. Strong knowledge of Microsoft Windows 11, Intune, Windows Server, Active Directory, PKI, and GPO.
5. Proficiency with EDR and EPP solutions, particularly Microsoft E5 Security Suite.
6. Familiarity with Infrastructure as Code principles and automation.
7. Knowledge of Threat Intelligence is a plus.
8. Experience in supporting penetration testing engagements.
9. Eager to learn and adapt to new technologies in a rapidly changing environment.
10. Highly organized, responsible, and flexible.
11. Skilled in scripting with a solid understanding of regular expressions.
12. Good understanding of general IT systems and TCP/IP networking.

COMPETENCIES AND BEHAVIOURS

1. Strong communication skills with the ability to collaborate effectively with virtual teams.
2. Highly organized and capable of managing hybrid infrastructures.
3. Passionate about Microsoft 365, Azure technologies, and security practices.
4. Good knowledge of traditional Microsoft Active Directory environments.
5. Proven analytical and problem-solving abilities.
6. Deep curiosity and enthusiasm for security, incident detection, and threat hunting.
7. Skilled at prioritizing and executing tasks in high-pressure environments.
8. Ability to design innovative, cost-effective solutions.

#J-18808-Ljbffr