Generali Personenversicherungen AG

Cyber Security Architect

📍 8134 Adliswil

Role and responsibilities

Define and maintain security architecture principles, standards, and reference models. Design secure solutions across cloud, on-premises, and hybrid environments, integrating identity, network, data, and application controls. Translate business and technical requirements into scalable, risk-based security designs. Conduct architecture reviews and threat modelling, identifying gaps and recommending remediation. Advise stakeholders and governance bodies, embedding security into projects, transformation initiatives, and technology decisions.

Team / description

We are looking for a passionate Cyber Security Architect ready to make a real impact on our security landscape. In this role, you will be at the forefront of designing and embedding cutting-edge security practices across platforms, applications, and infrastructure. You will help safeguard our most critical business operations while enabling innovation at speed, ensuring security is not a constraint but a true business enabler in cloud, on premises, and hybrid environments.

Qualifications and Skills

  • 5–8 years' experience in cyber security, security architecture, or enterprise architecture in complex environments (experience in regulated industries is a nice to have).

  • Proven track record designing secure architectures across cloud, on-premises, and hybrid ecosystems (experience with SaaS, containers, microservices, or CI/CD is a nice to have).

  • Strong knowledge of core security domains (IAM, network/Zero Trust, application/API security, data protection, infrastructure security) (cloud-native security and DevSecOps practices are a nice to have).

  • Experience applying risk-based design and balancing business, operational, and security requirements (privacy-by-design and data protection expertise is a nice to have).

  • Solid understanding of security frameworks (e.g. ISO 27001, NIST, CIS) and ability to work with senior stakeholders (exposure to architecture governance, third-party risk, or secure procurement is a nice to have).