Cyber Security Expert 100%

Job Description

GWF AG is a leading company for the measurement, data communication, and management of scarce resources in the areas of gas, water, electricity, and heat. Thanks to our many years of experience with high-precision measuring devices, the high level of expertise of our employees, and our leading technologies, we offer future-proof solutions that contribute to a sustainable energy and water use. GWF is a Swiss family business with over 300 employees and a 125-year history. In recent years, the SME has evolved from a proven meter manufacturer to an innovative solution partner for measurement systems and the meter data management for applications in utilities, industry, public infrastructure, and building services.

Shape the Future of Water and Wastewater Innovation: Join Our Team! We are seeking a passionate and skilled professional to join us as a Cyber Security Expert 100% in Lucerne (Switzerland) or Thessaloniki (Greece).

Your Role at a Glance
As part of our Global IT & Digital team, you will work closely with all experts involved in cyber security, development and product teams to manage a broad of range of cyber security and governance initiatives. Your responsibilities will span from developing and implementing security strategies and measures for both cloud and on-premises infrastructures (primarily Azure) to leading risk assessments, incident responses, compliance efforts and hardware product security audits. Your role will be a key contributor to the strengthening of GWF’s Security engineering competence.

Your Contributions Will Include
Security strategy

• Support IT organization’s cybersecurity strategy, ensuring alignment with industry standards like ISO 27001, NIS2, CRA, and GDPR

Policy and Compliance

• Support IT in audits and certifications, including ISO 27001 while ensuring governance and compliance of processes

Technical Expertise

• Implement and optimize tools like MS Intune, Defender, Entra ID, and Privileged Access Management to strengthen security
• Work in IT and with external partners to build a resilient and agile platform and network (implementation and engineering focus)

Product Security

• Advise R&D and product teams on security for IoT platforms and interconnected devices, with a focus on hardware-related security risks
• Support implementation of platform-related security measures, e.g. Infinio, etc.

Incident Management

Design and execute incident response plans, investigating breaches and continuously improving the security posture

Your profile
We are searching for someone with a blend of strategic and conceptual thinking as well as strong implementation capabilities in cyber security engineering.

• BSc or MSc in Engineering, Computer Science, or a related field
• Advanced training in Cyber Security
• Familiarity with security technologies, including vulnerability scanners, firewalls, IAM, SIEM, IDS/IPS, and containerization tools
• Hands-on experience with cloud technologies (AWS, Azure, GCP), server infrastructure, networking, web applications, databases, and mobile platforms
• Knowledge of DevOps tools (PowerShell preferred) and programming or scripting languages like Python or Go is a plus
• Experience with ISO 27001 compliance and risk assessments, with knowledge of NIS2 and CRA frameworks
• Exposure to hardware-based attacks and experience testing vulnerabilities in in-house hardware products is advantageous
• Strong communication skills in English, with German language knowledge as a bonus
• Ability to work independently and collaboratively in a fast-paced environment

We offer you

• A varied and responsible job in a dynamic and collegial team
• An attractive workplace in the city of Lucerne – easily accessible by public transport or car and situated between the lake and an impressive mountain panorama
• Promotion of your further development including support for internal and external training courses
• Further benefits and discounts

Are you interested?
We look forward to receiving your complete application documents.
Please note that we will only consider applications received via our website.