IT Risk & Security Specialist

At Chain IQ, your ideas move fast. Chain IQ is a global AI-driven Procurement Service Partner, headquartered in Baar, Switzerland, with operations across main centers and 16 offices worldwide. We provide tailored, end-to-end procurement solutions that enable transformation, drive scalability, and deliver substantial reductions in our clients' indirect spend. Our culture is built on innovation, entrepreneurship, ownership, and impact. Here, your voice matters - bold thinking is encouraged, and action follows ambition.

Role Purpose The IT Risk & Security Officer is responsible for identifying, assessing, and mitigating technology and information security risks across the organization. The role works closely with IT, Security, Legal, Risk, Procurement, and business stakeholders to ensure security controls are effective, regulatory and contractual obligations are met, and security requirements are embedded into business processes, projects, and third-party relationships. The position plays a key role in strengthening the organization's overall security posture while enabling business growth and operational resilience.

• Key Responsibilities
• Identify, assess, document, and monitor IT and information security risks, including remediation plans, risk acceptances, and exceptions.
• Support the development, implementation, and maintenance of information security policies, standards, and controls.
• Perform IT risk and security control assessments and track remediation activities for identified gaps.
• Monitor and report key security and risk metrics, including KRIs and KPIs, to relevant stakeholders.
• Support internal and external audits, certifications, and compliance assessments, including evidence collection and remediation follow-up.
• Ensure security requirements are integrated into projects, systems, and business processes throughout their lifecycle.
• Conduct third-party security assessments and evaluate the security posture of suppliers and service providers.
• Review security documentation and assurance reports, including SOC 2 reports, security questionnaires, and related evidence.
• Support the review of client and supplier contracts from an information security perspective, including security requirements, audit rights, and incident notification obligations.
• Collaborate with cross-functional teams to continuously improve the organization's IT risk management and information security framework.

Join a truly global team. We offer a dynamic and international environment where high performance meets real purpose. We're proud to be Great Place to Work-certified and even prouder of the people who make that possible. Let’s shape the future of procurement - together. Chain IQ – Create. Lead. Make an impact.

Information for agencies: Applications sent or uploaded by placement agencies or similar are not desired, will therefore not be considered and will be deleted.