Chief Information Security Officer (CISO)

Aveniq AG is a leading Swiss IT service provider operating in an environment shaped by digitalization, regulatory requirements, and increasing cyber risks. The company is restructuring its executive board, initiating a strategy process, and enhancing its security governance. This includes the redefinition of the Chief Information Security Officer (CISO) role. The CISO will oversee the governance of Aveniq's information security, focusing on mandate, baseline requirements, strategy, policies, control mechanisms, compliance, and the Information Security Management System (ISMS). The operational security tasks are handled by the Head of Security and the operational teams. The CISO will collaborate with relevant stakeholders to develop interfaces, decision-making processes, and governance mechanisms. Key responsibilities include developing and implementing the Security Strategy Board, establishing KPI-based management with automated dashboards, and advising the executive board, supervisory board, departments, and customers. The CISO will also work with internal and external auditors. The ideal candidate will have extensive experience as a CISO, Deputy CISO, or in a similar security leadership role, preferably in regulated or multi-stakeholder environments. Proficiency in building effective security governance, risk management, and understanding of ISO/IEC 27001/27017/22301, modern security architectures, and AI governance is essential. Fluency in German and English is required. Nice-to-have skills include experience with critical infrastructures, KPI-based management, and security dashboards. The role is based in Baden, with occasional travel to Aveniq locations in Dübendorf and Oftringen, as well as to customer sites. The position reports directly to the CFO and offers a high degree of influence within the organization, currently without direct reports. Was die Stelle verlangt: - Erfahrung als CISO, Deputy CISO, Security Governance Lead oder in vergleichbarer Security-Führungsfunktion - Nachweis im Aufbau wirksamer Security Governance, Gremienlogik und Entscheidungsmechanismen - Verständnis für operative Security wie SOC, Threat Intelligence, Pentesting, Security Operations und Incident Response - Erfahrung mit kritischen Infrastrukturen oder besonders sicherheitskritischen Kundenumfeldern - Deutsch und Englisch verhandlungssicher