Business Information Security Officer

About the role

The Business Information Security Officer (BISO) is the primary security liaison for Securities Services, ensuring that information security risks, regulatory obligations, and internal requirements are managed in line with SIX standards. You will work closely with business, IT, legal, risk, and compliance teams to embed pragmatic, business‑oriented security controls.

Key responsibilities

• Act as the main point of contact and advisor for information‑security topics within the assigned business area.
• Guide projects, applications, and initiatives to implement security requirements according to SIX standards and best practices.
• Identify, assess, and help mitigate information‑security risks affecting the business.
• Facilitate collaboration between business, IT, and security functions to deliver proportionate security solutions.
• Interpret and apply regulatory, contractual, and internal security requirements (e.g., data protection, industry standards).
• Contribute to security awareness, reporting, and continuous‑improvement activities and engage with the SIX BISO community.

Required profile

• Professional experience in information security, IT risk, or a related field.
• Strong understanding of security principles, risk management, and control concepts.
• Ability to translate technical security topics into clear language for non‑technical stakeholders.
• Familiarity with financial‑services regulatory and compliance requirements is a plus.
• Structured, solution‑oriented working style with attention to detail.
• Excellent communication and collaboration skills, with a service‑oriented mindset.
• Fluency in English; German or Spanish is an advantage.
• Relevant security training or certification is an asset.

Required skills