Information Security Manager - ISMS & Risk

You will develop and continuously improve our global Information Security Management System (ISMS), establish a structured information security risk management approach and support the organization in translating regulatory and security requirements into sustainable processes.

Working in an international environment, you will collaborate with stakeholders across the organization and support the reporting of information security risks, measures and developments to the GISO.

Our offer:

• Professional onboarding and close collaboration
• Stable international business environment in a market leading Swiss family owned company
• You work within a global team with different stakeholder groups across the globe and act as a trusted partner
• Professional and personal development opportunities
• Personal benefits like e-bike leasing and pension plans, based on location

Your tasks:

• Develop and continuously improve our global Information Security Management System (ISMS) and ensure consistent application across the organization.
• Establish, operate and continuously enhance our information security risk management system, including appropriate methodologies, processes and documentation.
• Plan, facilitate and document information security risk assessments, gap assessments, protection requirement assessments and risk workshops with relevant business and IT stakeholders.
• Support the implementation of information security requirements arising from NIS2, translating regulatory requirements into practical security measures and processes.
• Support the implementation of relevant requirements under the EU AI Act from an information security and risk management perspective.
• Conduct and support internal information security audits, identify gaps and improvement opportunities, and follow up on resulting measures.
• Assess information security risks related to suppliers and other business partners in close cooperation with Procurement and relevant internal stakeholders.
• Support information security reporting to the CISO, including the preparation and consolidation of relevant risks, measures, findings and management information.

• Degree in Information Security, Cyber Security, Computer Science, Business Informatics or a comparable qualification and relevant professional experience.
• Several years of professional experience in Information Security Management, ISMS, IT/Information Security Risk Management or Security Governance.
• Practical experience in building, implementing or continuously improving an ISMS, ideally in an international or decentralized organization.
• Strong practical knowledge of information security risk management, including risk identification, analysis, evaluation, treatment and documentation.
• Experience in conducting risk assessments, gap assessments, protection requirement assessments and security workshops.
• Good knowledge of ISO/IEC 27001 and related information security and risk management principles.
• Knowledge of NIS2 and experience in translating regulatory or compliance requirements into operational security measures.
• Familiarity with the EU AI Act and its implications for governance, risk and information security is an advantage.
• Experience with internal information security audits and the management of findings and remediation measures.
• Knowledge of third-party / supplier information security risk management is highly desirable.
• Strong analytical and conceptual skills combined with a pragmatic, implementation-oriented mindset.
• Confidence in working with stakeholders from IT and other business functions.
• English (B2 or higher), German is a plus

The SWISS KRONO Group is one of the world’s leading manufacturers of wood-based materials and stands for sustainable and innovative solutions in the fields of interiors, flooring and building materials. Founded in 1966 as a family-owned company, the Group now employs around 5,000 people at eleven production sites in eight countries around the globe.