全职 Information Security Officer 工作, 薪水, Coba IT Consultants 公司招聘中 - Ricebowl

Coba IT Consultants is supporting a leading global organisation in the appointment of Regional Security Officers to join its global Information Security function.

Reporting directly to the Group Chief Information Security Officer in Geneva, this is an opportunity to take real regional ownership within a centralised global security team.

You will act as a trusted security partner for your region, providing local expertise, supporting key stakeholders and ensuring effective security coverage across global time zones.

This is not a narrow GRC position. The role combines security governance, third-party risk, identity and access governance, incident escalation and cyber risk management, giving you exposure across a broad range of security challenges.

What you'll be responsible for

• Act as the regional escalation point for security events and incidents, working closely with Security Operations, IT and business teams.
• Make initial risk-based decisions outside Geneva business hours and escalate critical issues appropriately.
• Lead security assessments of new suppliers and technology providers, identifying risks before they are introduced into the environment.
• Review supplier security evidence including ISO 27001 certifications, SOC 2 reports and penetration testing results.
• Identify security gaps and recommend practical remediation measures or compensating controls.
• Review access to sensitive systems, data and privileged accounts, ensuring least-privilege and segregation-of-duties principles are maintained.
• Support access reviews and recertification across key trading and business platforms.
• Contribute to the development and consistent application of global information security policies, standards and procedures.
• Manage regional security exceptions, risk acceptances and cyber risk register entries.
• Support internal and external security audits.
• Provide the Group CISO with clear visibility of regional risks, security activity and key metrics.
• Build strong relationships across IT, Legal, Compliance, Procurement and the wider business.

What we're looking for

You'll bring at least five years' experience within information security, ideally combining governance and risk expertise with practical exposure to operational security.

You'll have:

• Strong experience across Governance, Risk and Compliance (GRC).
• Hands-on experience conducting third-party and supplier security assessments.
• Good knowledge of Identity and Access Management, identity governance and privileged access.
• Experience supporting the triage and escalation of security incidents.
• Experience developing and maintaining security policies, standards and procedures.
• Working knowledge of ISO 27001 and associated security controls.
• The confidence to assess situations and make sensible, risk-based decisions independently.
• Strong stakeholder management and communication skills.
• Fluent English.
• Experience within financial markets, commodities, trading or another highly regulated environment would be particularly valuable.
• Knowledge of NIST CSF, SOC 2 and regional data protection requirements would also be advantageous.

Qualifications

A degree in Information Security, Computer Science or a related discipline is preferred.

Professional certifications such as CISSP, CISM or CRISC are desirable, while ISO 27001 Lead Implementer or Lead Auditor certification would be an advantage.

Why this role?

This position offers much more than traditional security governance.

You'll become the security voice for your region, trusted to make decisions, challenge risk and work directly with senior stakeholders while remaining closely connected to a global security organisation.

You'll operate in a complex, fast-moving international environment where cyber security, resilience and real-time decision-making genuinely matter.

For someone looking to move beyond a purely advisory GRC position and take greater ownership, visibility and influence within a global security function, this is an excellent next step.