Senior Information Security and Data Protection Consultant (CH)

at  Approach

WHO WE ARE

Approach Cyber is a pure-play cyber security and privacy company.
Approach Cyber has been providing cyber security services to international clients for over 20 years and employs around one hundred experts in the field.
At Approach, we believe that everyone deserves digital peace-of-mind. This is our vision, our aspiration for a society where each and every one is reassured, where there is confidence and security in the digital world. Therefore, our role is to bring cyber serenity to society.
Every day, we take care of our clients’ cyber security while they focus on their business. We help them to prevent, withstand and recover from cyber security incidents and enable them to keep their full attention on their core activities.
We offer 360-degree solutions to improve our customers’ cyber resilience: anticipate, prevent, protect, detect, respond and recover. We are committed to delivering top-notch services: consulting and audit, training and awareness, security technology integration and software development. Approach is also a true Managed Security Service Provider (MSSP) thanks to our shared Security Operations Centre (SOC).

MINDSET & SOFT SKILLS:

• Excellent abstracting and summarising skills;
• Proactive;
• Good organisation and management of priorities;
• Responsibility and autonomy in the management of projects;
• Ability to collaborate, share knowledge, identify cross-disciplinary issues and explain technical aspects in simple terms.
• Uncompromised integrity: respect for the confidentiality of both client and company information

Approach must ensure the quality, availability, security and scalability of its information systems on behalf of one of its clients (a Swiss public-law entity based in Geneva).

To this end, the Senior Information Security and Data Protection Consultant will support the information systems security team in its main activities, in particular to :

• Defining security policy and guidelines and ensuring that they are applied to the institution’s processes and tools;
• Participating as an expert in information system (IS) security projects and incorporating security requirements into other development projects;
• Carrying out operational monitoring of IS security issues;
• Raising users’ awareness of information security issues, risky practices and recommended good behaviour;
• Participating in the preparation and testing of customer continuity plans;
• Keeping the IS security repository up to date (processes, risk mapping, etc.).

The scope of this job requires the candidate to be highly sensitive to the data and the need for increased protection with regard to the customer’s image.
The information system, consisting in particular of Web applications designed and developed in-house, is likely to undergo major changes in the short to medium term.