IT Security Officer 80-100%, (m/f/d)

The ZHdK is one of the largest and most diverse art universities in Europe, with around 2100 bachelor’s and master’s students. The fields of study and research include Art Education, Design, Film, Fine Arts, Music, Dance, Theatre and Transdisciplinarity. Located in the heart of Zurich, ZHdK is a dynamic place where passionate people from over 75 countries work, study, teach, research and continue their education. The university includes numerous exhibition and performance venues where students’ project work is publicly presented.

—

The Information Technology Centre (ITZ) of the Zurich University of the Arts (ZHdK) consists of around 50 different specialists who manage the IT infrastructure of ZHdK, lead projects, develop software and actively provide support.

—

For the support and further development of IT security, provided by the IT department for all areas of ZHdK, we are looking for a committed individual as of 1 January 2027 or by arrangement:

Your tasks:

• As IT Security Officer, you take on the operational and technical security tasks of ZHdK and ensure the effective implementation of IT security measures in operations as well as in initiatives and projects.
• You implement the IT security strategy tactically and operationally, support IT in implementation and monitor its effectiveness.
• You monitor the threat landscape, assess security risks in the ICT environment and conduct operational risk assessments.
• You derive necessary measures and implement them independently or together with IT staff in consultation, or oversee their implementation.
• You create and update security concepts for individual systems and solutions, implement them technically and develop secure design principles. You contribute to overarching IT security architectures and concepts as well as to the management of security-related projects and IT architecture.
• Evaluation & Procurement: You evaluate, specify and procure suitable security systems and install and integrate security components. You also develop technical solution proposals and decision-making bases under economic, organisational and technical conditions. In doing so, you support IT and specialist departments.
• Vulnerability & Patch Management: You conduct technical security tests, analyse and document vulnerabilities and ensure transparency including technical risk assessment. You pass your findings on to patch management.
• Incident Management: You analyse security incidents, identify and coordinate countermeasures, order immediate measures if necessary, document these and conduct post-mortem analyses.
• Control & Audits: You monitor compliance with security measures, support operational internal control system (ICS) checks and participate in security audits.
• Policies & Advice: You create security, operational and monitoring policies, advise members of ZHdK and project leaders on IT security issues. You also approve exceptions at the operational level.
• You have a leading role in the IT governance committee and assess new initiatives regarding IT security topics. You provide recommendations or impose conditions and accompany the project team during implementation.
• You prepare your own budget for IT security measures as well as an annual plan for your tasks and prioritise these based on risk. You maintain close communication with the CISO of ZHdK, the head of the IT department and the entire IT team.

Your profile:

• Education & Experience: Several years of experience in information and IT security as well as in professional project management, complemented by good architecture and in-depth ICT knowledge. Completed (higher) education in computer science or equivalent qualification.
• Security Expertise: Expert knowledge at the level of an ICT Security Engineer / Security Analyst as well as a solid understanding of current threats and modern attack and defence techniques and methods.
• Fields of Expertise: Affinity and experience in various cyber security fields: secure design principles, IAM, PAM, network security, security monitoring, vulnerability management, cloud technologies/cloud security, application security, WAF and advanced threat prevention / IDS/IPS.
• Technologies: Knowledge in securing Azure/M365, Defender XDR, Microsoft AD, Linux, macOS, virtualisation, container services and SIEM.
• Standards & Certifications: Basic knowledge of common security standards (including NIST CSF, ISO 27001) and relevant certifications.
• Regulatory Understanding: Basic knowledge of relevant legal requirements for information security (revised DSG, cantonal IDG) as well as experience with internal controls (ICS) and security audits.
• Independence: You work independently and are able to prioritise your tasks and drive their implementation even in the face of resistance.
• Personality: Assertiveness for professional concerns, ability to lead project and IT staff professionally, project management competence and perseverance in dealing with tensions.
• Very good German and good English skills.

What to expect:

• Central operational role: You ensure the effective implementation of information security at one of the largest and most diverse art universities in Europe.
• You collaborate with various departments (infrastructure, software development, architecture, IT management, CISO, GRC) and ensure the implementation and further development of IT security measures.
• Scope for design & responsibility: You have direct influence on the selection, introduction and operation of the security solutions used.
• An exciting and influential role at the interface of art, research and technology.
• A collegial team in an inspiring environment at the Zurich Toni-Areal.
• Flexible working hours.

Your new professional field is situated in the exciting and stimulating context of an internationally active art and design university, with the workplace in the lively Toni-Areal in Zurich-West and, by arrangement, home office. Employment conditions are governed by cantonal personnel legislation.

Your contacts for further information
Christian Schneider ( christian.schneider@zhdk.ch ), IT Security Officer
Alessia Consorti ( alessia.consorti@zhdk.ch ), HR Business Partner

Additional information about the Zurich University of the Arts can be found at www.zhdk.ch .

We look forward to receiving your complete application documents by 27 September 2026 via the link "Apply online now" at the end of this advertisement. Please note that we only consider online applications (no email applications) for this position. A personal cover letter is very welcome.