Operational Risk and Advisory IT and Information Security Specialist

Job Description

EFG International is a global private banking group, offering private banking and asset management services. We serve clients in over 40 locations worldwide. EFG International offers a stimulating and dynamic work environment and strives to be an employer of choice.

EFG is committed to providing an equitable and inclusive working environment that is founded on the principle of mutual respect. Joining our team means experiencing a supportive environment, where your contributions are valued and recognised. We strongly believe that the diversity of our teams gives us a competitive advantage by fostering better decision‑making and greater innovation.

Empowering entrepreneurial minds to create value – today and for the future. We are a private bank, offering personalised solutions on a global scale to private and institutional clients. Our sustainable success is based on our talents and on how we partner with our clients and communities to create lasting value.

• Development, Implementation, and Execution of Risk Activities
  • Enhance the risk management framework in relation to risk assessment and advisory, particularly in relation to new technologies, information security and cyber risks.
  • Collaborate with business units to integrate advanced risk management practices into their operations.
• Risk Assessment and Analysis
  • Conduct ad hoc risk assessments and analyses, especially concerning information security and cyber threats, to identify potential issues and propose efficient mitigating measures.
  • Perform incident analysis to determine root causes, identify mitigating actions, and ensure follow‑up.
• Advisory Support
  • Provide advisory support to Business Units, including reviewing the Internal Control Framework with a focus IT and Information Security in the way they support the sustainable business development of the Bank.
  • Offer expert advice on risk mitigation strategies, particularly related to information security and emerging technologies.
• Reporting and Communication
  • Report and present risk assessment results to the Risk Control leadership group and other relevant stakeholders, with a focus on cyber risk and technological vulnerabilities.
  • Prepare detailed risk reports and presentations for executive review.
• Digital Solutions Deployment
  • Actively participate in deploying new digital solutions to support the implementation of the internal control system globally, ensuring these solutions address information security and cyber risk concerns.

• University degree in business administration, economics, science, information security, or a related field.
• 10 years of working experience, including consulting or audit at a leading professional services firm and/or in a comparable position at a market‑leading bank.
• Strong understanding of core banking systems, end‑to‑end transaction processing, and cybersecurity principles.
• Proven ability to write reports and communicate effectively with a senior audience.
• Excellent analytical skills and a structured approach to problem‑solving and reporting.
• Exceptional communication skills in English, both written and spoken.
• Capacity to work autonomously and as part of a global team in a fast‑paced environment.
• Experience with new technologies and a deep understanding of information security and cyber risk management.

• Accountability:
  Taking ownership for tasks and challenges as well as seeking continuous improvement.
• Hands‑on:
  Being proactive to rapidly deliver high‑quality results.
• Passionate:
  Being committed and striving for excellence.
• Solution‑driven:
  Focusing on client outcomes and treating clients fairly with a risk‑aware mindset.
• Partnership‑oriented:
  Promoting collaboration and teamwork. Working together with an entrepreneurial spirit.