Cybersecurity Analyst

Highlights:

• 2 days remote work
• Bachelor's degree
• 5 years experience required in Banking Sector
• English & French Language
• Skills: Azure Cloud Services, Microsoft 365, DevSecOps, Cyber Safety, firewalls, vulnerability scans, NAC, ITIL

Description

As a Cybersecurity Analyst, you will be responsible for operationalizing our internal control system, monitoring risk and performance indicators, and collaborating with the Security Operation Center for analyzes and monitoring of corrective actions. You will be the primary contact for penetration testing and audits, and you will manage the complete process of remediating vulnerabilities orchestrated from our ITSM solution. You will collaborate with IT teams to ensure regulatory compliance and be a source of proposals to adapt security policies according to standards and the regulatory framework.

• Have operational responsibility for all of the Bank's cyber and data protection control environments;
• Monitor risk and performance indicators, and recommend improvements in the area;
• Work closely with the Security Operation Center and lead the analyzes and necessary corrective actions;
• Exercise continuous monitoring of identity and rights management operations, and manage recurring re-certification processes;
• Coordinate and be the first point of contact for penetration testing, security checks or any type of internal or external audit work;
• Work closely with internal IT teams and external consultants and service providers to ensure compliance with the various regulations and ensure management of the internal control system;
• Ensure compliance with IT security policies and procedures and ensure alignment with current regulations and standards (in particular FINMA, ISO and NIST).

Qualification:

• Minimum 5 years of experience in a similar role in the field of information security in the banking sector;
• Postgraduate diploma in computer science or related to the field of computer security;
• Excellent command of standard security tools (firewalls, vulnerability scans, NAC) as well as security tools integrated into Microsoft M365 services and the Azure cloud;
• Experience in DevSecOps tools and technologies, such as CI/CD pipelines, automated security testing, dependency checking tools and vulnerability management tools;
• Skills in identity and access management, particularly with EntraID tools;
• Mastery of complete vulnerability management processes: from management of scanning tools to coordination of patch implementation;
• Excellent knowledge of ITIL processes and ITSM solutions;
• Good communication skills to explain security issues to non-technical stakeholders, and to train/inform employees on specific security and data protection topics;
• Excellent analytical and problem-solving skills, with an ability to quickly identify causes and find solutions adapted to the environment;
• Ability to work under pressure and manage security incidents within tight deadlines;
• One or more cybersecurity certifications would be an asset for this position;
• Residence in Switzerland.

Application

The questions in this form are by the hiring manager for initial screening

Below are some ideas you can choose from to express your motivation for this job. Please write 2-3 lines, and feel free to write in your native language.

• Passion for the Industry, Desire for Professional Development, Desire for Job Stability and Career Growth, Attraction to the Job Role and Responsibilities, Desire for New Challenges, Opportunities for Impact, etc.