Information Technology Consultant

ICT Consultant (Risk & Security Governance)

Location: Bern / Hybrid (up to 2 days remote per week)

Duration: 12 months

Workload: 80-100%

The Role

We are looking for an experienced ICT Consultant with a strong background in Risk Management, Information Security, and IT Governance to support a business-critical application portfolio within a complex enterprise environment. The successful candidate will act as a key interface between Operations, Security, Delivery, and Product Management teams, ensuring effective risk oversight and governance across the organization.

Your Responsibilities

• Manage and consolidate the IT risk portfolio.
• Perform risk assessments and facilitate regular risk reviews.
• Coordinate risk mitigation activities and monitor execution.
• Support security, compliance, and governance initiatives.
• Prepare management reports, decision papers, and governance documentation.
• Collaborate with Product Owners, DevOps, Security, and Operations teams.
• Drive continuous improvement of risk and governance processes.
• Provide stakeholder management across multiple teams and organizational units.

Required Qualifications

• Several years of experience in ICT consulting, IT Operations, Service Management, or DevOps environments.
• Proven experience in IT Risk Management and Security Governance.
• Strong understanding of Information Security, Compliance, and Governance frameworks.
• Experience facilitating risk reviews and tracking mitigation measures.
• Strong communication and stakeholder management skills.
• Ability to present complex technical and organizational topics to management audiences.
• Experience with Jira and Confluence.
• German: B2 or higher.
• English: good working proficiency.

Nice-to-Have

• Knowledge of ISO 27001, NIST, COBIT, or comparable frameworks.
• Experience with audits, regulatory requirements, or compliance programs.
• Understanding of cloud-based application operations.
• Knowledge of DevOps, SRE, and modern operating models.
• Certifications such as CISSP, CISM, CRISC, or ITIL.
• Experience working in large enterprise organizations.

What's on Offer?

• Challenging assignment in a large-scale enterprise environment.
• High degree of autonomy and ownership.
• Direct impact on risk, security, and governance topics.
• Collaboration with senior security and technology experts.
• Opportunity to improve and shape governance practices for business-critical applications.

Attractiveness for candidates: Ideal for senior ICT consultants, IT service managers, security governance specialists, or risk managers who enjoy operating at the intersection of technology, security, compliance, and stakeholder management.