Head of Information Security and GRC

About the role

We are looking for a senior leader to define and run the security programme for Hilti’s construction software portfolio. The Head of Information Security and GRC will sit in the Line of Defense 1 function, report to senior management and work closely with product BISOs and the Group CISO.

Key responsibilities

• Develop, implement and continuously improve the construction software security programme.
• Lead the construction software security team and act as Product BISO for On!Track.
• Identify, assess and mitigate product security risks and threats.
• Ensure compliance with legal and regulatory frameworks such as CRA, NIS2 and the EU AI Data Act.
• Shape the ISMS, manage SOC 2 certification for the business unit and support Group ISO 27001 certification.
• Coordinate internal and external audits and drive remediation actions.
• Own and advance security architecture, cloud and AI security, and cyber‑risk management for construction software.
• Manage cross‑functional security projects from requirement definition through implementation.

Required profile

• Strategic thinker with strong leadership and communication abilities.
• Extensive experience in information security, GRC and leading security teams.
• Deep knowledge of security standards, regulatory requirements and risk management.
• Proven ability to work with senior executives and influence business processes.

Required skills

• SOC 2 certification
• ISO 27001 certification
• Cloud security
• AI security
• Risk analysis and technical risk assessments
• Information Security Management System (ISMS) implementation

What we offer

• Strategic seat at the table with senior leaders and board exposure.
• Opportunity to work from Hilti’s global headquarters with mountain views and modern workspaces.
• Influence across a rapidly growing construction software business unit.