Information Security Specialist

About AMINA Bank

AMINA Bank is a pioneer in the financial industry, founded in April 2018 and headquartered in Zug. It holds a Swiss banking and securities dealer license from FINMA. AMINA operates globally from regulated hubs in Switzerland, Abu Dhabi, and Hong Kong, offering fiat and crypto services.

Your Mission

AMINA is looking for an Information Security Associate to help run and improve its Information Security Management System (ISMS). This role supports day-to-day security governance, risk and control oversight, regulatory and audit activities, and the follow-up of agreed actions across the organization. It is a hands-on role for someone at the beginning of their career who enjoys working with both detail and people.

Key Responsibilities

• Support and enhance the Information Security Management System (ISMS) by maintaining security governance frameworks, policies, standards, and controls.
• Coordinate security risk and control oversight activities, including risk assessments, monitoring remediation plans, validating control effectiveness, and providing management reporting.
• Drive compliance and assurance initiatives through the coordination of internal and external audits, regulatory reviews, evidence collection, and tracking of findings.
• Partner with the CISO/DPO and cross-functional stakeholders to support data protection and privacy programs.
• Facilitate third-party security and due diligence reviews by assessing vendor security controls and risk profiles.
• Develop and promote security awareness and communication programs.
• Maintain security governance, risk, and compliance reporting by tracking key metrics, action plans, policy exceptions, and risk registers.
• Contribute to the continuous improvement of the Information Security function by supporting strategic security initiatives and researching emerging threats and regulatory developments.

Requirements & Tech Stack

• Information Security
• Cybersecurity
• Risk Management
• IT Audit
• Compliance
• Technology Governance
• AI-powered productivity tools (e.g., Microsoft Copilot, ChatGPT)

Qualifications

• Up to 3 years of experience in Information Security, Cybersecurity, Risk Management, IT Audit, Compliance, Technology Governance, or a related field.
• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Systems, Risk Management, Business Administration, Law, or a related discipline.
• Strong written and verbal English communication skills.
• Understanding of information security governance, risk management, compliance, and regulatory requirements.
• Strong analytical, organizational, and problem-solving skills with the ability to manage multiple priorities.
• Proficiency with AI-powered productivity tools (e.g., Microsoft Copilot, ChatGPT) and an understanding of responsible AI usage.
• Preferred: Experience within banking, financial services, fintech, or other regulated industries.
• Preferred: Exposure to Microsoft Purview or similar data protection and information governance solutions.
• Preferred: Certifications such as ISC2 CC, CompTIA Security+, ISO/IEC 27001 Foundation, or equivalent security/compliance credentials.
• Preferred: Knowledge of data protection, privacy, and third-party risk management practices.

Personal Attributes

• Curious, proactive, and committed to continuous learning.
• Strong attention to detail with a structured and quality-focused approach.
• Ability to explain complex security and compliance topics in a clear and practical manner.
• Professional, trustworthy, and comfortable taking ownership while collaborating across teams.
• Demonstrated ability to work effectively with cross-functional stakeholders to achieve security and governance objectives.