Security Specialist

About the role

As a Security Specialist at SOFTSWISS, you will be part of the Security Governance, Risk, and Compliance team, focusing on strengthening the organization's security framework. Your responsibilities will include conducting security reviews, risk assessments, and developing security policies.

Collaboration with cross-functional teams is essential to improve the overall security posture of the company. You will also be involved in planning and enhancing security awareness initiatives to ensure all employees are educated about security risks and best practices.

Skills that matter here

• Information Security: This role requires knowledge in information security to conduct assessments and reviews.
• Security Governance: You will help strengthen the security governance framework through policy development and compliance initiatives.
• Risk Management: Conducting risk assessments is a key responsibility to identify and mitigate security risks.
• Compliance: You will support compliance initiatives and ensure adherence to security policies.
• Security Awareness: Planning and coordinating security awareness training for employees is part of the role.
• Reporting: You will measure the effectiveness of security initiatives through reporting and analytics.

Who this role suits

• A proactive individual who thrives in a process-oriented environment.
• Someone with a background in information security or compliance, ideally with experience in security assessments.
• A team player who collaborates effectively with cross-functional stakeholders.
• An analytical thinker who can identify opportunities for process improvement and automation.

From the employer

• Perform Security Reviews for internal projects, business initiatives, and technology changes.
• Conduct Vendor Security Assessments and support third-party risk management activities.
• Participate in Security by Design reviews by identifying security risks and defining security requirements early in the project lifecycle.
• Develop, review, and maintain security policies, standards, guidelines, and governance documentation.
• Support Governance, Risk, and Compliance initiatives, including risk assessments, control implementation, and security process improvements.
• Plan, coordinate, and continuously improve Security Awareness initiatives, including employee training and phishing simulation campaigns.
• Measure the effectiveness of security awareness activities through reporting, metrics, and recommendations for improvement.
• Support the Security Disciplinary Framework and other governance-related processes.
• Identify opportunities to automate and optimize Security GRC processes, reporting, and operational workflows.
• Collaborate with cross-functional stakeholders to improve the organization's overall security posture and security maturity.

• 1–3 years of experience in Information Security, Security GRC, IT Governance, Risk Management, Compliance, Security Operations, or a related field.
• Experience conducting security assessments, security reviews, or vendor security assessments.
• Experience developing security policies, standards, procedures, or governance documentation.
• Experience planning or supporting Security Awareness programs, phishing simulations, or security training initiatives.
• Experience with reporting and analytics tools.
• Basic scripting or workflow automation skills.
• Experience with Jira, Confluence, Google Workspace, or similar collaboration platforms.
• Familiarity with AI tools (ChatGPT, Gemini, Claude, etc.) to improve documentation, research, and operational efficiency.

• Private health insurance
• Sports benefits
• Comprehensive Mental Health Program
• Free English lessons (online)
• Local language courses
• Paid time off
• Maternity leave support
• Referral program rewards
• Upskilling, internal workshops, and participation in professional conferences and corporate events