\\n For our client, one of the leading pharmaceutical companies, we are looking for a highly motivated professional with experience in security and privacy to join our dynamic team. As a PSPO member, you will help with SDLC activities such as threat modeling, cybersecurity risk management and laying out remediation strategies for vulnerability to ensure an effective implementation of cybersecurity in the company. You will be working together with product teams with interdisciplinary backgrounds, especially during design and development phases of the product life cycle, providing cybersecurity subject expertise.

General Information:

• Start date: ASAP
• Latest Start Date: 1.11.2023
• End date: 12 months
• Extension: possible
• Workplace: Rotkreuz
• Workload: 80-100%
• Remote/Home Office: 2 days onsite usually, 3 days HO
• Travel: no

Your tasks

• End-to-end activities that belong to the secure software development lifecycle for company\\\'s products. Defining adequate cyber security mitigations, identifying threats, assessing risks, definition of security testing methods and scope, and track remediation actions of security findings during development
• Conduct planning and execution of 3rd party review activities (Verification & Validation) related to Cybersecurity and Software Architecture
• Proactively identify flaws in company\\\'s product security, assess patient safety and business risk, and advise product managers on remediation steps
• Advice product teams to plan and implement adequate cybersecurity maintenance activities throughout the product\\\'s lifecycle
• Support development and maintenance of processes and tools for threat modeling, cybersecurity risk assessment, security testing with penetration testing tools, like Kali Linux, OWASP ZAP, Nessus and others

Your profile

• Minimum 5 years of related work experience in product security, with demonstrated experiences in areas such as:

• SDLC in Software Development, Network technology, Cryptography, Cloud computing technologies, DevSecOps methodologies etc. ()
• threat modeling, attack surface analysis, risk management, security testing, penetration testing and remediation activities. ()
• security by design and default concepts, OS hardening ()
• system and cloud infrastructure hardening and monitoring (****)
• Preferable certifications: CISSP
• Working knowledge of security controls, guidelines and standards (e.g.ISO27000 series, OWASP, CSA CCM, CIS 20 Critical Security Controls, SOC 2, and NIST)
• Good understanding of privacy and data protection regulations (e.g., HIPAA, EU GDPR)
• Demonstrated soft skills: problem-solving, leadership, communication, teamwork,
• Flexibility and adaptability
• Strong communication skills in English(min. C1 Level), German would be a plus
• Due to Swiss labor law, we can only accept applications from Swiss or EU/EFTA citizens (as well as current visa holders). Swiss residency or relocation is a mandatory

Info: Please note that this job posting will be closed on 28.08.2023 at 11:45 AM.

Your application

Please apply online. For further information about the position, please contact your Kelly recruiter, Mrs. Anh Nguyen (+41 76 586 02 13 / +41 79 292 08 57).
About Kelly
We connect people to jobs in ways that enrich lives. Kelly Services\\xc2\\xae is a leading global provider of human resources solutions, operating in over 40 countries. Together with its subsidiaries, Kelly offers a wide range of outsourcing and consulting services; temporary, permanent and management positions as well as flexible forms of employment at all hierarchy levels. Kelly Services (Schweiz) AG has been present in Switzerland since 1979 and counts more than 200 employees in over 40 Talent Offices and Centers.\\n \\n \\n \\n \\n \\n

\\n\\n Kelly Services\\n \\n\\n

\\n