Information Security Officer

JOB DESCRIPTION

Location: Zurich (Hybrid)

In this position, you'll be based in the Zurichoffice for a minimum of three days a week, with the flexibility to work from home for some of your working week. Find out more about our flexible work culture at computershare.com/flex.

We give you a world of potential

Are you passionate about Information Security and looking to work in an organisation that gives you the ability to support the vulnerability management of a global estate? Are you looking for a role that supports flexibility within the working day? We have an exciting new role that may be just what you are looking for!

The Global Information Security team is responsible to drive the development, deployment and management of information and cyber security across the Computershare businesses, globally. Through partnerships with the business units, Technology Services and other support functions, the Global Information Security team actively support the business objectives whilst reducing the overall composite risk to Computershare.

This role, while based within the EMEA region (Zurich), is part of a global team of information security professionals that deliver in-depth technical security services for our most critical applications and infrastructure, to ensure they are highly resilient against existing and emerging cyber security threats.

Want to learn? We've got you covered. We are big on employee progression, so we ensure that you're given the training and tools that you need to excel in your career.

A role you will love

The Information Security Officer provides technical and non-technical information security consultancy, architecture and project services to the Computershare business units and Computershare Technology Services (CTS) within region.

Supporting the Regional CISOs and Global CISO in the development and execution of the Information Security Consultancy programme (supporting the wider Computershare Information Security Strategy) by overseeing a portfolio of information security services and ensuring that these are consistently aligned with the Global Information Security Group operating model.

The Information Security Officer will contribute towards and actively participate in regional and global information security projects and initiatives. In addition you will contribute to managing and maintaining vendor relationships, evaluating usefulness and cost of products, and making appropriate recommendations to assist in execution of the enterprise security architecture.

Other key responsibilities include:

• Providing broad strategic and tactical information security risk management experience.
• Present technical and non-technical information security consultative support/guidance to the regional business units/technology teams ensuring compliance with relevant regulatory and legislative requirements.
• Maintaining technical information security advice to internal stakeholders regarding technology projects, ensuring security is considered and applied prior to deployment in line with relevant SDLC processes.
• Maintain a forward-looking perspective on emerging information security, technology developments and their relevance to business and technology strategies.
• Work with the Global Information Security team to deliver and interpret the results of network penetration tests, vulnerability scans, patch assessments build compliance scans, support incident investigations, operational security matters and governance.
• Attending regular team, forum and project meetings, providing both verbal and written reports as may be required.
• Answer client contractual questions, RFIs/RFPs and client vendor assessments regarding information security related topics.

• Possess, or working towards, one of more of the following professional information security certifications: CISSP, CISM, CRISC or similar) together with a thorough understanding of the security principles outlined in OWASP, NIST and ISO27000.
• Confident and able to communicate both with the management level and technical staff as to why security is a business enabler.
• Evidenced experience of being the single point of contact to all internal stakeholders regarding information security related topics.