The Avaloq Security team is an international team of analysts, senior and expert software engineers and architects. The Avaloq Security team develops and maintains central application security frameworks and tools for all companywide technology stacks and consults the business teams on best practice implementations for context specific security requirements. It furthermore operates the group-wide application security assessments, monitors the security vulnerabilities and supports the business teams in related risk mitigation plans.

Your key tasks 

• Analysis, design and development of requirements in collaboration with colleagues of Product Development, customers, business analysts and software partners
• Collaboration and contribution in projects across departments
• Check the daily automated build process for security warnings and provide support to resolve it
• Monitor third party library enrolment, update, and removal by using in-house tools and Whitesource
• Provide expert analysis on false positives findings, validate exploitability of detected vulnerabilities, and develop possible fixes
• Maintain data for configuration control of the release baseline.
• Coordinate security actions across multiple team to ensure the high quality of the Avaloq products
•  Prepare and distribute reports and documentation of security risks
• Conduct periodic reviews to ensure compliance with established security policies and procedures
• Participate in technical talks to internal members regarding security implementation, vulnerabilities, and opportunities for improvement

Your Team

We are looking for an individual with a passion for cyber security to work alongside a talented team to Improve and operate a cyber security Center.

The role requires a strong background and understanding of all cyber security domains.

In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and Leads the planning, implementation, documentation.

You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes.

Your mission

• Identify cyber security gaps in existing and proposed projects.
• Recommend Cyber Security changes or enhancements and drive implementation
• Manage and cultivate the defined security services and the relationship to our service providers
• Participate in organizational Security projects, as required
• Support in development processes, and procedures for the team
• Assist correlating alerts, implementing monitoring Use Cases
• Provide implementations, recommendations for protecting and resolving threats and incidents
• Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security
• Manage and support in major Cyber Security Incidents
• Support in 24/7 shifts rotation in the future
• Act as a technical Lead role model in the team on driving initiatives and projects

The Cyber Security Analyst will play a critical role in safeguarding the organisation's digital assets by monitoring, analysing, and responding to potential cyber threats and incidents. This position ensures the integration and alignment of operational and tactical security measures to support the organisation's strategic objectives. The analyst will collaborate with external security service providers to oversee the effectiveness of outsourced operations, and assist with some local IT support activities. Additionally, the role advises on security improvements, provides technical and security advice to other departments and the local office and maintains up-to-date knowledge of emerging cyber threats and technologies.

Your key tasks 

• Data Collection: Identify and gather relevant data from multiple internal and external sources, including logs, databases, APIs, and third-party security tools (e.g., Splunk, Tenable and others).
• Data Integration: Clean, process, and integrate data from disparate sources to ensure accuracy and consistency.
• Analysis and Interpretation: Perform exploratory data analysis to uncover patterns, trends, and anomalies in security data.
• Automation: Develop automated processes for data extraction, transformation, and loading (ETL) to improve efficiency and reduce manual effort.
• Dashboard and Report Creation: Design, build, and maintain interactive dashboards and reports using tools such as Apache Superset, Grafana, or similar platforms.
• Stakeholders Interaction: Collaborate with internal stakeholders to understand their security reporting needs and customize solutions to meet their requirements.
• Security Insights: Generate actionable insights and recommendations to improve clients' security measures based on data analysis.
• Collaboration: Work closely with engineers, architects, digital intelligence, and other stakeholders to ensure alignment and accuracy in reporting.
• Documentation: Maintain clear and comprehensive documentation of data sources, methodologies, and processes.

Role Description 

The IT Security Officer serves as the process and policy owner related to the availability, integrity and confidentiality of customer, business partner, employee and business information/data. A key element of the IT Security Officer’s role is working with executive management to determine acceptable levels of risk for the organization. This position is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. 

Key functions 

• Security Operations:
• own  and drive security education and security awareness programs across the organization
• own, drive and continuously improve security processes, policies and tooling 
• real-time analysis and triage of security threats and incidents
• proactively educate and inform executive management of developing security threats
• develop, implement and execute a strategic, comprehensive enterprise information security and IT risk management program 

• Application Security:
• introduce application and infrastructure security monitoring processes and tooling 
• design and manage and run application and infrastructure security testing (internally and with 3rd parties)

• Security governance: 
• make sure that security related initiatives are understood and funded 
• lead and drive future company security certification programs 
• represent the company security in front of technology partners 
• conduct internal technical and organizational audits 
• manage and support external audits 
• manage, handling and resolve security incident response cases

• degree in business administration or a technology-related field required 
• 5+ years of hands-on IT security experience 
• experience in risk management, information security and IT security
• knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST
• knowledge of PCI-DSS requirements for merchants working with BSP supervised financial institutions 
• excellent written and verbal communication skills and high level of personal integrity and empathy 
• innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams
• experience with contract and vendor negotiations and management including managed services