Information Security Specialist / Deputy CISO in Aarau

Overview

In this role you protect critical information and digital assets for financial institutions in Switzerland, within the Thales security group. You will work closely with the CISO and cross-functional teams to strengthen information security, ensure regulatory alignment, and drive risk-based improvements. You translate complex legal and contractual requirements into practical guidance and support audits and certifications. You will also help build security awareness and define enduring security processes. This position combines hands-on risk management with strategy, in a hybrid Aarau setting to support banks and partners.

Leistungen / Benefits

• Flexible, part-time models
• Flexible vacation options including buying additional leave
• Paid premiums for accident and daily sickness insurance
• Employee share program “Sharing Thales”
• Extensive training via Thales Learning Hub
• Benefits platform with employee discounts

Verantwortungsbereiche

• Assess information security risks by identifying assets, objectives, threats and appropriate risk treatment measures
• Develop and maintain security concepts, policies, guidelines and procedures
• Create and continuously improve security processes and operating instructions
• Plan and deliver security awareness and training across the organization
• Translate legal, regulatory and contractual requirements into practical guidance for business areas and external partners
• Support information security as part of audits, compliance, incident management and risk management activities
• Support the CISO and represent information security in projects, certifications and security assessments (ISO 27001, ISO 14298, PCI-CP)

Zentrale Anforderungen

• Completed vocational training or degree in information security management, or relevant professional experience
• Strong analytical and problem-solving skills for independent risk assessment
• Experience developing and maintaining security concepts, policies, processes and documentation
• Understanding of information security requirements in legal, regulatory, contractual, audit and compliance contexts
• Commitment to continuous professional development; data protection interest is a plus
• Excellent German and English skills, written and spoken
• Proactive, resilient and collaborative approach with clear communication and service orientation

• proactive
• resilient
• collaborative
• risk assessment
• security concepts and policy development
• documentation