IT Security Specialist

Tasks

As an IT security specialist, you will be responsible for the operation, standardization, and documentation of security controls to ensure consistent implementation across on-premises, cloud, and Microsoft 365 environments. You will identify, escalate, and track security risks and deviations, working closely with colleagues in Switzerland. Key Responsibilities:

• Implementing and operating internal security controls across on-premises systems, cloud platforms, and Microsoft 365
• Own and operate key security tools, including:
  • Data Protection (DLP)
  • Microsoft Purview (Compliance, Information Protection, DLP)
  • Microsoft Defender for Cloud Apps (MCAS)
  • Intune / MDM and Device Security Controls
  • Zscaler
• Define, consolidate, and document security standards, configurations, and processes to ensure:
  • a single, consistent security foundation
  • Clear ownership, versioning, and annual review cycles
• Define and maintain consolidated security processes to improve governance and ensure structured security changes
• Implement and coordinate vulnerability management, including assessment, prioritization, remediation, and validation
• Identifying, Assessing, and Escalating Security Risks Across IT Operations, the Cloud, the Workplace, Projects, and SOC Activities
• Identify and highlight violations or deviations from approved safety standards to ensure that they are corrected or formally accepted as acceptable risks
• Supporting cybersecurity incident response, including investigation, remediation, documentation, and closure
• Assist with the preparation of quarterly safety documentation and audit evidence

Requirements

Required Profile:

• 3–5 years of experience in IT / information security or security operations
• Extensive hands-on experience with the Microsoft security stack (Purview, DLP, MCAS, Intune/MDM) and cloud-based and on-premises security tools
• Experience with zero-trust security architecture
• Experience with cloud security
• Experience in control-based and audit-driven environments (ISAE 3000, ISO 27001, NIST, CIS)
• A structured, documentation-driven approach with a strong focus on risk management
• Excellent English skills; knowledge of German is a plus but not required

Certifications and Training (Plus):

• Cybersecurity certifications (e.g., CISSP, CISM, CISA, ISO 27001, Microsoft Security) are a major plus
• Relevant academic background (a bachelor's or master's degree in computer science, information security, or a related field) is a plus

We offer

We offer you an exciting and forward-looking work environment with a wide range of responsibilities, a motivated and supportive team, and a professional workplace. You’ll benefit from attractive working conditions