Information Security Specialist

Cornèr Bank in Lugano seeks a Mid-level Information Security Specialist for a hybrid contract role. The position focuses on security governance, risk assessments, and ensuring compliance with regulatory standards.

The company is looking for a security partner to support projects and initiatives by embedding secure-by-design principles from the start. The specialist will also oversee security exceptions and risk acceptances, maintaining proper governance and traceability throughout the process.

Responsibilities

• Conduct risk and control evaluations for IT systems and business operations.
• Establish and verify security needs for new technologies and system updates.
• Verify that security measures are correctly applied and effective, adhering to FINMA, LPD, ISO 27001, and NIST guidelines.
• Help develop security policies, standards, and second line of defense tasks.
• Assist with internal and external audits related to security and IT risk.

Requirements

• 3 to 7+ years of experience in Information Security, IT Risk, or Security Governance.
• Background in project security, security assurance, or control frameworks.
• Solid grasp of risk management and regulatory requirements (knowledge of FINMA is beneficial).
• Fluent proficiency in English and Italian.
• Current residence in Ticino or willingness to relocate there.

Nice to have

• Professional certifications like CISSP, CISM, or CISA are advantageous.
• Additional language skills in German and/or French are a plus.

What the company offers

• Flexible remote work options and adaptable working hours to support work-life balance.
• A range of benefits and incentives.
• Activities focused on well-being, motivation, and team building.