Head of Information Security and GRC

About the role

Hilti is looking for a senior leader to define and run the security program for its Construction Software portfolio. The Head of Information Security and GRC will act as the product BISO for On!Track and will sit in Line of Defense 1, reporting to senior management.

Key responsibilities

• Develop, implement and continuously improve Hilti’s Construction Software security program.
• Lead the Construction Software security team and the product BISOs, including acting as BISO for On!Track.
• Identify, assess and mitigate product security risks and threats.
• Ensure compliance with legal and regulatory requirements such as CRA, NIS2 and the EU AI Data Act.
• Own and maintain the BU CSW SOC 2 certification and support Group ISO 27001 certification.

Required profile

• Master’s degree in Computer Science, IT, Cybersecurity or related field (PhD preferred).
• Several years of leadership experience in software/IT security, with decision‑making responsibility.
• Deep knowledge of security standards (ISO 27001, SOC 2, NIST) and regulatory frameworks.
• Strong communication skills to convey complex security concepts to non‑technical stakeholders.

Required skills

• Security frameworks and standards: ISO 27001, SOC 2, NIST.
• Cloud & AI security, IAM, endpoint security, data security.
• Secure development lifecycle (SDLC), DevSecOps, application security.
• Risk management, incident response and security architecture.

What we offer

• Strategic seat at the table with senior leaders and board exposure.
• Work from Hilti’s global headquarters with mountain views, modern workspaces and fitness facilities.
• Relocation support across Europe and flexible hybrid work model.
• Access to global talent development programs, career mobility and flexible work arrangements.
• On‑site daycare, e‑bikes, parking and other lifestyle benefits.