Generali Personenversicherungen AG
Cyber Security Architect
📍 8134 Adliswil
Role and responsibilities
Define and maintain security architecture principles, standards, and reference models. Design secure solutions across cloud, on-premises, and hybrid environments, integrating identity, network, data, and application controls. Translate business and technical requirements into scalable, risk-based security designs. Conduct architecture reviews and threat modelling, identifying gaps and recommending remediation. Advise stakeholders and governance bodies, embedding security into projects, transformation initiatives, and technology decisions.
Team / description
We are looking for a passionate Cyber Security Architect ready to make a real impact on our security landscape. In this role, you will be at the forefront of designing and embedding cutting-edge security practices across platforms, applications, and infrastructure. You will help safeguard our most critical business operations while enabling innovation at speed, ensuring security is not a constraint but a true business enabler in cloud, on premises, and hybrid environments.
Qualifications and Skills
5–8 years' experience in cyber security, security architecture, or enterprise architecture in complex environments (experience in regulated industries is a nice to have).
Proven track record designing secure architectures across cloud, on-premises, and hybrid ecosystems (experience with SaaS, containers, microservices, or CI/CD is a nice to have).
Strong knowledge of core security domains (IAM, network/Zero Trust, application/API security, data protection, infrastructure security) (cloud-native security and DevSecOps practices are a nice to have).
Experience applying risk-based design and balancing business, operational, and security requirements (privacy-by-design and data protection expertise is a nice to have).
Solid understanding of security frameworks (e.g. ISO 27001, NIST, CIS) and ability to work with senior stakeholders (exposure to architecture governance, third-party risk, or secure procurement is a nice to have).