Information Security Risk Manager

ppSygnum is a global digital asset banking group, founded on Swiss and Singapore heritage. We empower professional and institutional investors, banks, corporates and DLT foundations to invest in digital assets with complete trust. Our team enables this through our institutional-grade security, expert personal service and portfolio of regulated digital asset banking, asset management, tokenization and B2B services. /p pIn Switzerland, Sygnum holds a banking licence and has CMS and Major Payment Institution Licences in Singapore. The group is also regulated in the established global financial hubs of Abu Dhabi, Luxembourg and is registered in Liechtenstein. /p pWe believe that the future has heritage. Our crypto-native team of banking, investment and digital asset technology professionals are building a trusted gateway between the traditional and digital asset economies that we call Future Finance. To learn more about how Sygnum's mission and values are shaping this digital asset ecosystem, please visit sygnum.com and follow us on LinkedIn and X. /p h3Our Values /h3 pA key pillar of our success are the Sygnum values that define and unite us a team. We proudly call them our SYGN values: /p ul libS /b stands for the importance we hold in Seeking and seizing opportunities, and the way we take personal ownership for delivering results for our clients; /li libY /b represents the way we say Yes to maintaining the highest level of integrity and fairness in everything we do. Sygnumers always display confidence without attitude; /li libG /b reminds us to always Grow and win together. We only succeed by supporting each other and challenging ourselves, and our team-mates, to reach for new heights; /li libN /b is here for Nose for value because we are always looking to focus on what matters most to our clients, partners and team. /li /ul pSygnum has one of the most diverse teams in the industry. Diversity plays a central role in keeping our work culture open, our teams productive and energised, and our solutions at the forefront of the industry. In the spirit of our SYGN value to “grow and win together”, we fully embrace an equal opportunity mindset in the way we onboard, develop and promote our team members. /p h3About the role /h3 pThis is a unique opportunity to work at the intersection of a digital-native and FINMA-regulated bank with an international footprint, combining the pace and technology stack of a digital-first organization with the rigor of a regulated financial institution. /p pWe are looking for an experienced Information Security Risk Manager to join our Information Security function in Zurich. Reporting to the CISO, you will own the security control catalogue end to end, drive the enterprise information security risk assessment process, and act as the primary liaison for regulatory and audit engagements. You will also help modernize how we monitor and report on control performance by automating oversight across cloud, endpoint, and other data sources, and you will keep the organization security-aware through an engaging awareness program. /p h3Key responsibilities /h3 ul liOwn the information security control catalogue, including control oversight, effectiveness rating, KPI measurement, and deficiency remediation. /li liManage and perform the top-down and bottom-up information security risk assessment processes. /li liProvide subject matter expert input relating to all aspects including IT risks, security measures, controls, and remedial actions. /li liDrive automation of security oversight processes, integrating information from multiple sources (cloud, endpoint, and others) into unified reporting dashboards. /li liProvide information risk and security subject matter expertise inputs and assessments to our IT and business teams in support of their risk management activities. /li liOversee information security audits, whether performed by the Bank or third- parties. /li liSupport our culture development of information and security risk awareness, hence, good conduct through supporting regular communications, awareness, and training. /li li5+ years of professional experience in information risk frameworks and management and IT audit, preferably in a mid/large-sized financial institution or audit company. /li liSolid working knowledge of recognized frameworks such as NIST CSF, ISO 27001, or CSA CCM, and experience applying them to real-world control environments. /li liProfessional certification such as CISSP, CISM, or CRISC (or actively working toward one). /li liFamiliarity with security tooling and data sources across cloud and endpoint environments, and an interest in automating oversight and reporting (e.g., dashboards, GRC platforms, scripting/BI tools). /li liProven communication and interpersonal skills, including multi-stakeholder management. /li liStrong communication skills, written and verbal in English. /li liUnderstanding in and knowledge of digital assets, hence, some experience working in Agile, or DevSecOps models is a plus. /li liExperience with cloud security in AWS and Microsoft Azure, as well as in Cloud Security Posture Management (CSPM) tools, such as Wiz, is a plus. /li /ul h3Our Offer /h3 pJoining Sygnum means being part of a dynamic, global team that is building a trusted gateway between the traditional and digital asset economies. Working at Sygnum, you will experience our fast-paced, exciting work environment that embraces meritocracy and collaboration and open communication. Alongside our ambitious long-term mission, we also come together for reaching important milestones and annual crypto-industry anniversaries like Bitcoin Pizza Day, and regularly celebrate together at themed company events as part of our journey to shape Future Finance. /p pSygnum offers a comprehensive package of benefits for all team members. They include: /p ul liAttractive combination of market salaries and entrepreneurial incentive scheme /li liProfessional development via Mentoring and Buddy programs /li liOne-month fully paid sabbatical after five years of continuous employment /li /ul /p #J-18808-Ljbffr