IT Security Leader

Description

Position Summary: Leads the implementation and evolution of technological security at Zurich, ensuring appropriate controls to reduce cyber risks across infrastructure and applications. Key Highlights: 1. Lead technological security initiatives and Security by Design. 2. Manage technological exposure and the vulnerability lifecycle. 3. Advise technology projects on incorporating security controls. Imagine working for a company that truly cares about its employees, customers, stakeholders, and the entire community involved. Imagine working for a company committed to doing the right thing and aiming to become the world’s best insurance provider! Zurich is one of the world’s leading insurance companies and among the few operating globally. With approximately 55\,000 employees dedicated to understanding our customers’ needs and delivering solutions for individuals and businesses—from small enterprises to multinational corporations. Here, we champion Sustainability—innovating in development policies and aligning ever more closely with global changes. We care about societal trust and how we continuously innovate, seeking technologies and strategies that enable us to deliver a memorable experience to our customers. We also foster a culture of diversity and inclusion. Our purpose statement and values are designed to protect, inspire trust, and help our employees reach their full potential. Therefore,***we maintain an inclusive hiring policy promoting the selection of persons with disabilities who meet the job requirements*** Join us as a Zuricher and become part of our team as an **IT Security Leader!** **\#LI\-Remote, \#LI\-Hybrid, \#LI\-Onsite** ============================================ Your objective will be to lead the implementation and evolution of technological security capabilities, ensuring infrastructure, applications, cloud, and digital solutions incorporate appropriate security controls to reduce technological and cyber risk. **Responsibilities:** * Lead technological security initiatives and Security by Design. * Manage technological exposure and the vulnerability lifecycle. * Coordinate security assessments for infrastructure, applications, and cloud environments. * Advise technology projects on incorporating security controls. * Coordinate technical security testing and remediation follow-up. * Participate in the technical management of relevant incidents. * Define and monitor metrics. * Translate technical risks into actionable insights for decision-making. Basic Education: Professional degree in Systems Engineering, Computer Engineering, Electronics Engineering, Telecommunications, or related fields. Additional Training Preferred: Specialization in Information Security or Technological Risk Management. Certifications: ISO27001, CISSP, or related. Knowledge of cybersecurity, technological infrastructure, hybrid architectures, and cloud services, with experience implementing security controls in enterprise environments. Proficiency in vulnerability management, application security, security in technology projects, technical risk assessment, and incident response. Practical knowledge of frameworks and standards such as NIST, ISO 27001, CIS Controls, and OWASP, as well as the ability to analyze threats, prioritize risks, define security metrics, and collaborate with architecture, infrastructure, development, and operations teams to strengthen the organization’s security posture. General Experience: 3\-4 years Insurance Industry Experience? Yes People Management Experience? No Language: English Level: Basic\-Intermediate If you’ve read this far, thank you for your interest! If you feel you’re a good fit and are excited about this opportunity, don’t hesitate to reach out and apply.