Governance, Risk and Compliance Manager

Job Description

Your Team & Mission

As a Governance, Risk & Compliance Manager, you will join our Governance, Risk & Compliance team and report to the Group COO. You will work closely with the CISO, DPO and General Counsel / Legal team. You will ensure that our GRC requirements are effectively implemented in day-to-day operations and play a key role in identifying and managing risks at an early stage, in close collaboration with the business units.

Your Responsibilities

• You continuously develop our internal control system (ICS) and our management systems for information security, data protection and AI.
• You develop, maintain and implement company-wide compliance policies and guidelines, taking AI-related risks into account.
• You coordinate internal and external audits, particularly the annual ISAE audit, and ensure the structured resolution and follow-up of findings and corrective actions.
• You support and coordinate risk management and business continuity management (BCM) activities, ensuring transparent documentation and follow-up of relevant risks.
• You act as the main point of contact for external compliance and audit inquiries from customers and regulators.
• You develop and deliver compliance awareness campaigns and training sessions to embed compliance, data protection and security topics across the organisation in an accessible and practical way.

Qualifications

Your Profile

• You have a higher education qualification in business, law, IT or a comparable field.
• You have at least five years of experience in IT audit, GRC or information security.
• You are familiar with relevant standards such as ISAE 3402/3000, SOC 2, ISO 27001/17/18, ISO 27701 and COBIT. Ideally, you also have experience with regulatory requirements such as DORA, FINMA regulations and the EU AI Act.
• You are familiar with the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR).
• Certifications such as CISA, CIA, CRISC or CISSP, as well as experience with GRC tools such as OneTrust, are an advantage.
• You communicate confidently with a range of stakeholders and enjoy working at the intersection of business, IT/security and legal.
• You are fluent in German and English, both written and spoken.

Additional Information

We Offer

• Attractive employment conditions with a variable compensation component
• Flexible Work Smart concept with the option to work from home
• Vibrant, professional and collaborative company culture with great events and team activities (company celebrations, “Gipfeli” breaks, etc.)
• Strong team spirit, flat hierarchies and a diverse range of responsibilities
• Attractive workplace in the heart of Zurich with modern infrastructure
• Generous professional development budget, including dedicated time for learning, as well as additional attractive fringe benefits

Contact

If you have any questions, please feel free to contact Katharina Senning, Senior Talent Acquisition Specialist, at [email protected].

For data protection reasons, applications can only be submitted online. Simply click on “Apply now”, complete the form, attach your documents, and your application will be submitted.

For recruitment agencies: only direct applications will be considered.

We look forward to hearing from you!

Wüest Partner