Ciso and Manager Security, Risk, Compliance

vor 2 Wochen


Geneve, Schweiz The Global Fund Vollzeit

Reporting to the CIO, the role is primarily to provide the vision and leadership for developing and supporting cyber security strategy, initiatives, and roadmap. The Chief Information Security Officer (CISO) directs the planning and implementation of enterprise IT systems, business operations, and facility defences against security breaches and vulnerability issues. This individual is also responsible for auditing existing systems, while directing the administration of security policies, activities, and standards. Oversees cybersecurity risk management within the Global Fund, and is responsible for governance, auditing, risk management and compliance of the IT systems.

This role will play a pivotal role in safeguarding our information systems and ensuring the integrity and confidentiality of sensitive data. This role will be responsible for developing and implementing robust cybersecurity strategies, policies, and procedures to protect our organization from evolving cyber threats, in alignment against best practice standards ISO 27001, 22301 and GDPR.

This role will advise senior management and governance bodies on cyber security to protect the Global Fund and the ecosystem (e.g., PR’s) from emerging cyber threats (phishing, data loss, reputational risk linked to any misuse of system / data) and plan defences against security breaches and drive a continuous improvement mindset.

Key Responsibilities

As Manager, Security, Risk, Compliance & CISO this person will:
Information Security & Risk
- Lead the definition, implementation, and management of Global Fund Information Security Strategy and roadmap.
- Ensure effective governance of Information Security, liaising with all relevant stakeholders.
- Develop and implement comprehensive cybersecurity risk management strategies, policies, and procedures in line with industry best practices (e.g., ISO 27001/2, NIST) and organizational objectives.
- Collaborate with Legal Department to define and implement strong security, privacy and data protection framework through grants and across the organisation.
- Lead, implement, maintain, and oversee enforcement of business continuity policies, procedures and plans for end-to-end resilience, following industry-standard best practices, e.g., ISO 22301.
- Identify, assess, and prioritize cybersecurity risks and vulnerabilities across our information systems and networks, ensuring proactive mitigation measures are in place.
- Collaborate with cross-functional teams to establish effective incident response plans and ensure prompt and appropriate action is taken in the event of a cyber incident or breach.
- Contribute to IT projects identifying their risk profile and security requirements and assist the implementation of adequate security controls as an integral part of the final product.
- Monitor and evaluate the performance of cybersecurity technologies, tools, and solutions, making recommendations for enhancements or replacements as necessary.
- Lead and manage a team of cybersecurity professionals, providing guidance, mentoring, and performance feedback to enhance their skills and capabilities.
- Conduct regular audits and assessments to evaluate the effectiveness of cybersecurity controls, ensuring compliance with relevant legal, regulatory, and contractual obligations.
- Stay abreast of the latest cyber threats, trends, and emerging technologies to continuously enhance our cybersecurity posture and proactively address potential risks.
- Foster a culture of cybersecurity awareness and education within the organization by developing and delivering training programs across the organisation and country ecosystem (e.g., PR’s).
- Build increased collaboration on cyber threat intelligence for prevention and protection of Global Fund and PR’s/countries.
- Collaborate with external stakeholders, including government agencies, industry partners, and cybersecurity organizations, to exchange information, share best practices, and enhance collective defence against cyber threats.
- Provide regular reports and updates to the CIO and senior management on cybersecurity risks, incidents, and the overall effectiveness of the cybersecurity program.
- Responsible for the IT risk reporting in collaboration with the Chief Risk Officer (CRO) team for an integrated enterprise risk reporting via Global Fund operational risk register (ORR) to Senior Management (MEC), the Audit and Finance Committee (AFC) and Board.
- Manage all matters relating to e-discovery investigations in collaboration with HR, Legal, Communications, Risk, Ethics and Office of Inspector General (OIG) Departments.
- Promote and oversee strategic cyber security relationships between internal resources and external entities, including government, vendors, and partner organizations.

Compliance
- Develop and implement a comprehensive IT compliance program, including policies, procedures, and controls aligned with legal and regulatory requirements.
- Monitor and assess t



  • Geneve, Schweiz Bottomline Vollzeit

    **Who Are We?** Bottomline is on a mission to be the world's leading business payments company, aligning our team to the common purpose of transforming the way businesses pay and get paid. It is a journey that goes around the world serving financial institutions and companies in more than 90 countries. Our offices across EMEA are conveniently positioned to...


  • Geneve, Schweiz LHH Vollzeit

    For one of our client, a private bank based in Geneva, we are seeking for a Risk & Compliance Manager. **Main Responsibilities**: - Monitor risk and compliance management, including credit risk, market risk, operational risk, legal, and compliance, in accordance with Head Office and local regulations. - Implement measures to fulfill the second line of...


  • Geneve, Schweiz Wipro Limited Vollzeit

    Overview: - The IS Security GRC Specialist will become part of the IS Security Governance, Risk & Compliance team and their main focus will lay on executing the 2nd Line Risk management activities. - Conduct information security risk assessments and ensuring risk identification, risk analysis, risk mitigation/response/control, risk monitoring, including...


  • Geneve, Schweiz PICTET Vollzeit

    **Your team**: - The- The - **Risk & Compliance **team, which is part of the Technology & Operations Division, is responsible for proactively managing and preventing technological and operational risks, as well as for monitoring compliance with internal and external rules.**Your role**: - Helping to identify new trends and risks. - Being involved in the...

  • Credit Risk

    Vor 5 Tagen


    Geneve, Schweiz Richard James Recruitment Specialists Vollzeit

    SALARY COMPETITIVE ROLE TYPE PERMANENT LOCATION GENEVA, CH **Our client is an established Oil trading company, with physical assets across Europe. They actively source, refine, market and trade Crude Oil and Oil products, and associated financial derivatives.** The business is also taking a lead role in the Energy Transition with the development of several...

  • Business Risk

    vor 2 Monaten


    Geneve, Schweiz PICTET Vollzeit

    **Your team**: - Pictet Asset Services (PAS) provides custody, fund services and trading solutions for external asset managers, fund managers and institutional clients. We manage every aspect of the asset servicing value chain and our range of bespoke solutions include value-adding analytics, trading strategy support and digital front-end interfaces...


  • Geneve, Schweiz Lombard Odier & Cie Vollzeit

    A career at the Lombard Odier Group is something to be proud of. Our mission is to protect and grow our clients’ wealth - but not by any means necessary. Sustainability is at the heart of everything we do and we treat our clients’ wealth as if it were our own. We protect our clients’ assets for the long-term using expertise and innovation, all...


  • Geneve, Schweiz PICTET Vollzeit

    **The programme**: - This is a unique 24-month experience where we offer you a permanent position along with a specific programme with rotations in different teams to build your expertise and professional skills. Based on a permanent contract, our graduate programme includes on - and off-the-job components, placing the emphasis on teamwork, strengthening...

  • Risk Management

    Vor 5 Tagen


    Geneve, Schweiz Van Cleef & Arpels Vollzeit

    Code de référence: 99325**Risk Management & Compliance Director**: - Genève, GE, CH- Permanent**Qui sommes-nous ?** Une Maison de Joaillerie & Haute Joaillerie qui valorise des savoir-faire exceptionnels dans un univers empreint de créativité, d'enchantement, de culture et de poésie. Notre Maison recherche des personnes aux multiples talents qui...

  • Head of Compliance

    Vor 3 Tagen


    Geneve, Schweiz Brodard Executive Search Vollzeit

    Description du poste - On behalf of our client, a financial company based in Geneva, we are looking for a Head of Compliance & Risk.**Your Responsibilities** - Help the company by maintaining and building a sustainable risk and compliance framework that places regulatory and compliance best practice standards, and a culture of appropriate conduct at the...

  • Compliance Manager

    vor 2 Wochen


    Geneve, Schweiz The Source World Connection Vollzeit

    Our company, an online platform connecting buyers and sellers of exceptional goods, is seeking a compliance manager to join its team in the context of a newly created position. The position is a 60% part-time, based in Geneva. You will implement compliance procedures and risk management closely with management. Position Objectives: - Implement a...

  • Head of Compliance

    vor 1 Monat


    Geneve, Schweiz TMF Group Vollzeit

    **Job no**: 571444 **Work type**: Full time **Location**: Geneva, Switzerland **Categories**: Administration **Office Location**: Geneva **About TMF Group** TMF Group is a leading provider of critical administrative services, helping clients invest and operate safely around the world. Our 9,100 experts and 120 offices in 85 jurisdictions worldwide...


  • Geneve, Schweiz skyguide Vollzeit

    Skyguide provides air navigation services in Switzerland and parts of neighbouring countries. With around 1500 employees from more than 30 nations, we are pursuing an ambitious innovation strategy that is based on a strong safety and learning culture. We are guided by four values: “We team up to succeed”, “We drive innovation”, “We own what we...

  • Head of Risk

    vor 2 Monaten


    Geneve, Schweiz IQ-EQ Vollzeit

    Company Description IQ-EQ is a leading Investor Services group which combines global expertise with an unwavering focus on client service delivery. We support fund managers, global companies, family offices and private clients operating worldwide. **Job Description**: **Responsibilities (how we will measure success)**: - To deliver the agreed strategy...


  • Geneve, Schweiz coni+partner AG Vollzeit

    Our client is a private bank in Geneva. We are looking for a process risk specialist (m, f, d) as an Operational Risk Manager Aufgaben Reviewing existing risk management framework and processes / Facilitating the process of identifying, evaluating, managing and monitoring risk across the bank including the development of risk management methodologies and...


  • Geneve, Schweiz ELCA Security Vollzeit

    Job number 1377 - Date posted - Sep 20, 2023 - Job category - Cybersecurity - Level of experience - 6 to 10 years - Job type - External - Employment type Full-time - Work site - Geneva - Company ELCA Security - ELCA Security**About ELCA Security**: ELCA Security is a subsidiary of the ELCA Group. With more than 15 years of expertise, several key solution...

  • Head of Risk

    vor 2 Monaten


    Geneve, Schweiz IQ-EQ Vollzeit

    Company Description IQ-EQ is a leading Investor Services group which combines global expertise with an unwavering focus on client service delivery. We support fund managers, global companies, family offices and private clients operating worldwide. **Job Description**: General Tasks: - Actively lead and perform in line with both local and Group...


  • Geneve, Schweiz PICTET Vollzeit

    **Your team**: - Pictet Asset Services (PAS) provides custody, fund services and trading solutions for external asset managers, fund managers and institutional clients. We manage every aspect of the asset servicing value chain and our range of bespoke solutions include value-adding analytics, trading strategy support and digital front-end interfaces...


  • Geneve, Schweiz PICTET Vollzeit

    **Your team**: - Corporate Functions includes the Group’s non-banking activities and employs more than 600 people. These functions are carried out by specialists with expertise across all business units, and include the Communications, Compliance, Finance, Human Resources, Information Security, Internal Audit, Legal, Corporate Office, Risk and Tax...


  • Geneve, Schweiz Barclay Simpson Vollzeit

    Posted by - Georgina Carter- Recruiter Global Asset Management firm is actively seeking to add another member to their European Investment Risk Team. The organisation has an outstanding opportunity for learning, progression and development and faces directly off to the Portfolio Managers and the front office. **The company**: Global Asset Management firm is...