Information Security Officer (ISO)

Bern, Switzerland (and remote work) | 80-100% |

What you can contribute to

• participate in the operation and continuous improvement of the information security management system (ISMS) based on the ISO/IEC 27001 standard
• advise specialised services and management bodies on security issues, raise awareness and train staff on the implementation of technical and organisational security measures
• verify that documents for new projects and applications of the FOPH comply with the Confederation's security procedures; assess the adequacy of security measures and ensure the effectiveness of their implementation
• update, improve and deploy strategies and guidelines aimed at strengthening cybersecurity and information security within the office - Evaluate and support risk analyses and corresponding management measures
• coordinate and monitor audits, penetration tests and assessments and evaluate the implementation of defined improvement measures

What makes you unique

• degree from a university of applied sciences in cybersecurity or computer science with further training or certification in information security (CAS/MAS in IT security, CISM, CISSP, CCSO or equivalent)
• at least five years of professional experience in cybersecurity or information security; an advantage: experience in operating an ISMS
• commitment, good communication skills, assertiveness, integrity, dynamism and willingness to take responsibility and actively contribute to the development of cybersecurity and information security, in a team spirit
• good technical understanding of modern IT architectures and current security plans, especially regarding cloud security, Zero Trust and network and application security - Strong knowledge of ISO/IEC 2700x, NIST and CIS Controls frameworks - Ability to assess technical risks and security requirements and communicate adequately with the management line and business areas
• active knowledge of two official languages and, if possible, passive knowledge of the third

In a few words

You combine governance, risk management and compliance skills with solid technical knowledge, while pragmatically and effectively advancing cybersecurity and information security in collaboration with IT services, data protection officers, business areas and the management line.

What we offer

• Working for Switzerland We are committed to the success of the Swiss model and the well-being of the population.
• Diversity every day We ensure equal opportunities, which allow us to deploy our skills and express different viewpoints.
• Workplace health We support and advise our employees on all issues related to physical or mental health.

All benefits

Commitment to health

We are competently committed at the national level to the health of the population and the healthcare system in Switzerland. We also collaborate within international networks. Our task is demanding, exciting; we accomplish it by relying on peer-to-peer exchanges. Our values? Commitment, openness and respect. If you are looking for meaningful work in diverse fields and in a dynamic and attractive environment, the FOPH is the place for you.

Additional information

Questions about the position

Mathias Engel +41 58 463 10 49

Questions about the application

HR Service-Centre +41 58 469 17 32