Specialist Cyber Security

About the job

Electricity powers our lives. And we move electricity. Every day, we commit ourselves to the security of supply on the network side in Switzerland. On behalf of Switzerland and in cooperation with international partners, our employees ensure a powerful and reliable electricity grid.

Specialist Cyber Security - 1647

Ensuring electricity in Switzerland

In this exciting role, you keep yourself constantly informed about current developments in cyber and information security. Together with your colleagues in the "ICT Infrastructure Workplace" area, you share responsibility for implementing the Cyber Security strategy. You support and advise ICT specialists in the design, ICT security architecture, as well as in the development and operation of secure solutions. You contribute to strengthening the security culture regarding information security within the company through appropriate measures and support operational security operations. "Security by Design" is your guiding principle.

You will specifically undertake the following tasks:

• Link between Cyber Security and the Client Infrastructure teams
• Management of cyber risks and compliance with security requirements
• Implementation of risk treatments and development of suitable measures to reduce risks
• Review of existing infrastructure facilities regarding the application of cyber security best practices, internal requirements, and policies
• Active participation in the further development of security architectures and assessment of the impact on security and compliance in the ICT Infrastructure area
• Close support and involvement in infrastructure projects to enforce a "Secure-by-Design" strategy
• Representation of Client IT Security in overarching projects and committees

This is how you make a difference

With your strong powers of persuasion and assertiveness, you succeed in anchoring security requirements within the company. As a communication talent with solid know-how in the infrastructure environment, you convince both professionally and personally.

You bring the following:

• Comprehensive competencies in the ICT Infrastructure area with a focus on Client Engineering including their management systems on both conceptual and technical levels
• Completed university degree and excellent expertise or further training in the field of Cyber Security
• Experience in creating and enforcing security policies and concepts
• Sound knowledge of standards for cyber and information security (e.g. ICT minimum standard, NIST CSF, OWASP SAMM, BSI IT baseline protection, ISO2700x) as well as for the areas Client (Windows), VMware ESX and Citrix Virtual Apps on Desktops
• Know-how in risk management and practical experience in implementing Information Security Risk Assessments according to ISO / IEC 27005 or ISO / IEC 31000
• Experience in Offensive Security (Security Auditing, Pentesting, CTF... etc.)
• Certification as CISSP, CISM or similar is desirable
• Experience in the energy sector is an advantage
• Very good knowledge of German and English

This is how we inspire you

We offer varied and exciting tasks in a company unique to Switzerland and a modern working environment in close proximity to the station in Aarau. In addition, you benefit from the following perks with us:

• Flexible working hours (42 hours per week), including home office options
• 25-30 days of holiday as well as company holidays between Christmas and New Year
• Progressive social benefits and an attractive pension fund
• Opportunities for professional development
• Financial and/or time support for internal or external training
• Competitive salary and reward for good performance

About us

We design, operate and develop the digital workplaces as well as central infrastructure and platform services of Swissgrid. Our area of responsibility ranges from modern client and workplace solutions to specialised workplaces and virtualisation and infrastructure platforms. We ensure that our services are reliable, secure and future-proof. As operators of critical infrastructures, we take responsibility and place great value on quality, stability and security. We think long-term, promote innovation with moderation and follow the principle of the "Smart Follower": We deliberately use proven technologies to create sustainable solutions with real added value. Our collaboration is characterised by trust, openness and mutual support. We share our knowledge, take responsibility for each other and live a culture in which mistakes are understood as opportunities for improvement. Together, we pursue the goal of continuously developing our services and creating the best possible benefit for our internal customers.

We are particularly committed to promoting young talent. We actively invest in the training of young IT specialists and accompany them on their path to becoming competent and committed IT professionals.