Information Security & Data Protection Officer (m/f/d)

In this role you will lead and continuously improve Swisslog’s global ISMS and data protection program, collaborating with IT, Legal, Compliance, and business teams. You will drive ISO 27001 initiatives, ensure regulatory compliance (GDPR, NIS2) and customer requirements, and manage risk, incidents, and security guidance for projects. You’ll report on security metrics, foster a global security culture, and support international teams across locations. This is a chance to shape the security posture of a world-leading robotics-focused company.

• Flexible Working Options
• Great Team Spirit
• Modern Work Environment
• Onboarding

• Maintain and improve the global ISMS in line with ISO 27001
• Lead ISO 27001 certification initiatives across entities and locations
• Ensure compliance with regulations and standards (NIS2, GDPR, customer requirements, governance frameworks)
• Conduct security and privacy risk assessments and coordinate mitigations
• Manage security and privacy incidents and corrective actions
• Provide security and privacy guidance for business projects
• Support customer security assessments, questionnaires, and contractual requirements
• Monitor, report, and communicate security KPIs and management information
• Promote a strong security and privacy culture across international teams

• 5+ years in Information Security, Cybersecurity, IT GRC, or related field
• Strong knowledge of ISO 27001 and risk management
• Good understanding of GDPR
• Experience with audits, compliance reviews, and security assessments
• Ability to translate security/regulatory requirements into practical business solutions
• Strong analytical, communication, and stakeholder management skills
• Experience in international and cross-functional environments
• Willingness to travel internationally occasionally
• Fluent English (written and spoken)
• Degree in Information Security, Cybersecurity, IT, Risk Management (desirable)
• Certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Auditor/Lead Implementer (desirable)
• Experience with NIS2, TISAX, ISO 9001 or similar standards
• German language skills are an advantage

• strong analytical thinking
• clear communication
• stakeholder management
• ISO 27001
• risk assessment and management
• information security governance