Manager / Senior Manager - Cyber Regulatory Strategy & Transformation (m/w/x) Genf

VollzeitVor OrtSenior

Jetzt bewerben

Nejo KI-Zusammenfassung

Translating evolving cybersecurity regulation into practical strategies and compliance programs for clients. At least five years of cybersecurity governance, risk, and compliance experience required. Hybrid work, with travel to client sites.

Deine Match-Analyse

von deinem Karriere-Agenten

Warum dieser Job zu dir passt

Mögliche Lücken

Tipps für deine Bewerbung

Anforderungen

At least five years of relevant experience in cybersecurity governance, risk and compliance, technology or digital regulation, information security, digital resilience, or related field
Practical knowledge of one or more cybersecurity regulatory regimes (e.g., NIS2, Cyber Resilience Act, DORA, FINMA)
Proven experience translating regulatory requirements into executable compliance programmes, governance, controls and operational processes
Led or contributed to regulatory applicability, readiness or gap assessments, control mapping, remediation, regulatory change or compliance assurance engagements
Understanding of cybersecurity governance and risk-management practices and familiarity with standards/frameworks (e.g., ISO/IEC 27001/27002, NIST CSF, CIS Controls, IEC 62443)
Bachelor’s or master’s degree in cybersecurity, information security, information systems, engineering, business, or related field, or equivalent professional qualification
Professional certifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer/Auditor, project-management qualification) are an advantage
Strong project-management, analytical, communication and presentation skills
Commercial mindset and experience contributing to proposals, market development and long-term client relationships
Fluent in English
German and/or French are a strong advantage

Aufgaben

Translate evolving cybersecurity regulation into practical strategies
Develop resilient operating models for compliance
Build sustainable compliance programmes
Support clients in assessing regulatory applicability and readiness
Design and implement compliance programmes for NIS2 and its national implementations
Implement compliance programmes for the Cyber Resilience Act (CRA)
Implement compliance programmes for DORA
Implement compliance programmes for relevant Swiss and international sector-specific requirements
Lead multidisciplinary engagements to determine regulatory impact
Deliver engagements to determine regulatory impact across legal entities, jurisdictions, business services, products, and supply chains
Translate legal and regulatory obligations into practical governance models
Translate legal and regulatory obligations into policies
Translate legal and regulatory obligations into control frameworks
Translate legal and regulatory obligations into target operating models
Translate legal and regulatory obligations into risk-based implementation roadmaps
Design end-to-end cybersecurity compliance programmes
Establish end-to-end cybersecurity compliance programmes
Enhance end-to-end cybersecurity compliance programmes
Develop regulatory inventories
Map obligations and controls
Define ownership models
Manage evidence for compliance
Conduct control testing
Manage compliance issues and remediation
Develop compliance metrics and reporting
Monitor regulatory change
Perform regulatory readiness assessments
Perform gap assessments
Perform maturity assessments
Define proportionate remediation measures
Support clients through implementation of remediation measures
Support clients through testing of remediation measures
Support clients through independent review of remediation measures
Advise clients on required regulatory capabilities
Advise clients on cybersecurity risk management capabilities
Advise clients on incident response capabilities
Advise clients on regulatory reporting capabilities
Advise clients on third-party and supply-chain security capabilities
Advise clients on vulnerability management capabilities
Advise clients on secure product development capabilities
Advise clients on business continuity capabilities
Advise clients on executive oversight capabilities
Facilitate workshops with boards and executive management
Facilitate briefings with boards and executive management
Facilitate workshops with stakeholders across Legal, Compliance, Risk, IT, Security, Product, and Engineering
Facilitate briefings with stakeholders across Legal, Compliance, Risk, IT, Security, Product, and Engineering
Turn complex regulatory and technical matters into clear decisions
Turn complex regulatory and technical matters into clear actions
Serve as a trusted advisor to clients
Act as a key client contact

Berufserfahrung

5 Jahre

Ausbildung

Abgeschlossene Berufsausbildung

Sprachen

Englisch – fließend

Tools & Technologien

NIS2Cyber Resilience ActDORAFINMAISO/IEC 27001ISO/IEC 27002NIST Cybersecurity FrameworkCIS ControlsIEC 62443

Von Nejo automatisch aufbereitet

Nejo hat diesen Job automatisch von der Website des Unternehmens PricewaterhouseCoopers AG erfasst und die Informationen auf Nejo mit Hilfe von KI für dich aufbereitet. Trotz sorgfältiger Analyse können einzelne Informationen unvollständig oder ungenau sein. Bitte prüfe immer alle Angaben in der Originalanzeige! Inhalte und Urheberrechte der Originalanzeige liegen beim ausschreibenden Unternehmen.

Zur Originalanzeige bei PricewaterhouseCoopers AG

Über das Unternehmen

ConsultingGenf

Das Unternehmen unterstützt Kund:innen bei der Umsetzung von Digitalisierungsstrategien und der Implementierung von IT-Lösungen.

Wie gut ist dein Lebenslauf?

Nejo bewertet ihn, und bringt ihn danach gemeinsam mit dir in Bestform.

Du hast noch keinen Lebenslauf?

Noch nicht perfekt?

EY
Risk Senior Consultant - Non-financial risk management (m/w/x)
Vollzeitnur vor OrtSenior
Genf
EY
Senior Consultant - Financial Services Tax & Regulatory Advisory (m/w/x)
Vollzeitnur vor OrtSenior
Genf
Artefact
Engagement Manager (Strategy & Data/AI Transformation) (m/w/x)
Vollzeitnur vor OrtSenior
Zürich, Lausanne, Genf
EY
(Senior) Consultant - Technology Strategy & Transformation - Financial Services (m/w/x)
Vollzeitnur vor OrtJunior
Grand-Lancy
Lombard Odier
Business Risk Manager - Technology & Operations (m/w/x)
Vollzeitnur vor OrtSenior
Genf