Head of IT Security Operations & Controls(m/w/x)

Description

Leading the bank’s operational security, you will manage the SoC and incident response while modernizing controls through AI and automation to ensure the company remains resilient against cyber threats.

Requirements

• •10+ years in cybersecurity leadership
• •Success running security operations
• •Strong systems thinking skills
• •Evidence of automation mindset
• •Excellent communication and partnership skills
• •Calmness and accountability during incidents
• •Swiss residency or relocation willingness
• •Regulated industry experience and framework familiarity
• •Track record introducing AI/ML
• •Customer-facing or regulator engagement experience
• •Mission-centric and humble leadership
• •Pragmatic risk management
• •Comfort operating in risk degrees
• •Intellectual curiosity and action bias
• •Proficiency in SoC stack technologies
• •Experience in controls operations
• •Knowledge of cloud and data security
• •Engineering integration and automation skills
• •Risk and assurance reporting experience

Tasks

• •Lead the bank’s operational security function
• •Manage and coach a team of four individuals
• •Oversee day-to-day SoC operations and incident response
• •Lead major incident command under pressure
• •Drive rigorous, evidence-based security investigations
• •Define and execute the multi-year SoC strategy
• •Adopt cloud and AI-assisted threat detection and automation
• •Own the effectiveness of key security controls
• •Monitor vulnerability management and data loss prevention
• •Establish clear security KRIs and KPIs
• •Execute the bank’s penetration testing and red team roadmap
• •Coordinate internal capabilities and external security partners
• •Oversee security support tickets and operational workflows
• •Maintain service-level expectations with internal stakeholders
• •Partner with engineering and infrastructure teams to scale controls
• •Strengthen incident readiness through tabletop exercises
• •Translate security risks into clear business context
• •Engage with customers, auditors, and internal leaders

Tools & Technologies