IT GRC Manager

SUMMIT RECRUITMENT AG seeks a Senior IT GRC Manager in Luzern to lead IT governance, risk, and compliance initiatives, including the OneTrust platform implementation.

The company is looking for a senior professional to advance its IT governance, risk, and compliance framework. This role focuses on aligning these efforts with business goals while working closely with the second line of defense to ensure robust operational standards.

Responsibilities

• Assist the IT department in applying compliance requirements operationally and help establish consistent process management.
• Lead the deployment and enhancement of the OneTrust platform, including specific GRC modules like data mapping, ISRM, and TPRM.
• Configure global settings for OneTrust and manage the implementation of extensions, interfaces, or new modules.
• Actively contribute to the evolution of third-party risk management frameworks, the IT IKS framework, and related tools.

Requirements

• Minimum five years of experience in IT governance, risk management, IT ICS, or compliance, preferably within the insurance sector.
• Strong knowledge of IT risk, third-party risk, information security, data protection, and IT processes, along with familiarity with standards such as ISO/IEC 27001, COBIT, and NIST CSF.
• Fluent command of both German and English.
• Proven ability to manage projects effectively.

Nice to have

• Professional certifications such as CISA, CRISC, or CGEIT.