Michael Bailey Associates
Risk & Security Coordinator Location: Bern / Hybrid 01.10. 26 – 30.09.27 80-100% workload About the Role We are looking for an experienced IT Risk & Governance Manager to join our client‘s team and take responsibility for managing the risk portfolio, strengthening security governance, and ensuring compliance across a complex IT environment. In this role, you will work closely with operations, security, delivery teams, and product owners to identify and assess risks, coordinate mitigation measures, and support informed management decision-making. Key Responsibilities Consolidate and manage the IT risk portfolio, ensuring risks are documented, assessed, and monitored. Conduct risk analyses and risk reviews, identifying technical and organisational risks. Coordinate and track risk mitigation measures across multiple teams. Manage security, compliance, and governance-related issues. Prepare management reports, presentations, and decision-making documents. Collaborate with stakeholders across IT operations, security, and delivery teams. Support the Product Owner with governance, risk, and security-related matters. Further develop and improve risk management and governance processes. Moderate risk reviews and ensure follow-up actions are implemented effectively. Your Qualifications & Experience Bachelor‘s degree in Computer Science, Business Informatics, Information Security, or a comparable technical field. Several years of practical experience in IT operations, service management, DevOps, risk management, or security governance. Strong experience in risk analysis, assessment, and mitigation within complex IT organisations. Sound knowledge of information security, security governance, and compliance. Experience managing stakeholders across different teams and organisational units. Ability to structure and communicate complex technical and organisational topics. Experience preparing reports for management and decision-making bodies. Experience using Jira and Confluence. Very good German and good English skills. Desirable Skills Knowledge of ISO 27001, NIST, COBIT, or comparable security and governance frameworks. Experience with audits, compliance, and regulatory requirements. Understanding of business-critical applications operating in cloud environments. Knowledge of DevOps, SRE, and modern IT operating models. Experience governing application portfolios. Certifications such as CISSP, CISM, CRISC, ITIL, or equivalent. Experience working in large enterprise environments with complex stakeholder structures.