Head of Information Security and GRC

About the role

Hilti is looking for a senior leader to define and run its Construction Software security program. The Head of Information Security and GRC will act as a Line of Defense 1 function, guiding product security, compliance and risk across the business unit.

Key responsibilities

• Develop, implement and continuously improve the Construction Software security program.
• Lead the security team and Product BISOs, including acting as Product BISO for On!Track.
• Identify, assess and mitigate product security risks and threats.
• Ensure compliance with legal and regulatory frameworks such as CRA, NIS2 and the EU AI Data Act.
• Shape the ISMS, drive ISO 27001 and SOC 2 certification, and coordinate internal and external audits.
• Manage security projects from requirements gathering to implementation, covering Cloud, AI and technical risk analysis.
• Collaborate with senior executives to embed security into business processes and report incidents to management.

Required profile

• Strategic thinker with strong leadership and communication abilities.
• Extensive experience in information security, governance, risk and compliance within a technology environment.
• Proven track record of leading security teams and managing product‑focused security initiatives.

Required skills

• SOC 2 certification
• ISO 27001 certification
• Information Security Management System (ISMS)
• Cloud security
• AI security
• Technical risk analysis

What we offer

• Strategic seat at the table with senior leaders and board exposure.
• Opportunity to work from Hilti’s global headquarters with modern workspaces and mountain views.