Head of IT Security and Compliance

About Corintis:

Corintis is a startup that is a provider of advanced semiconductor cooling technologies. Some of the biggest challenges of our lifetime, from climate modeling to drug discovery, constantly require more computing power. More powerful chips generate more heat; extracting this heat is a major challenge for our future.

Current cooling systems are not only limited but also wasteful; cooling data centers consume more power than London and New York combined. At Corintis, we remove these limitations by integrating cooling directly inside the chip. We enable the sustainable computing of the future to address the biggest global challenges.

Working at Corintis:

Corintis offers a friendly and team-oriented workplace bringing together a diverse group of nationalities to solve the biggest computing challenges of tomorrow. Based on the EPFL campus near Lausanne, we are closely connected to the local ecosystem and are located a few minutes walk from Lake Geneva.

Job Description:

We are looking for a strategic leader to oversee IT governance, data strategy, and cybersecurity frameworks across the company. This role focuses on defining and enforcing policies, ensuring regulatory compliance (e.g. ISO27001, NIST), and leading long-term efforts in data management and security. You'll work closely with the Co-Founder & COO and support operational IT staff already in place.

This is a key leadership role in a deep tech environment involving both hardware and software teams. You’ll set the standards and best practices that ensure resilience, security, and long-term scalability of our IT infrastructure and data systems.

Key Responsibilities:

• Define and own IT governance frameworks across the organization (risk, compliance, documentation, audits).
• Ensure adherence to key standards such as ISO27001, NIST Framework, and other applicable regulations (GDPR, etc.).
• Lead cybersecurity strategy: define proactive security policies, review threat models, and oversee incident response protocols.
• Develop and maintain a company-wide data management strategy including ownership, privacy, retention, and quality policies.
• Guide long-term IT architecture and systems design, in coordination with operational IT teams.
• Create and maintain Business Continuity & Disaster Recovery plans.
• Evaluate and manage IT risks in collaboration with internal teams and external auditors.
• Lead IT onboarding/offboarding policy from a governance and access control standpoint.
• Serve as internal advisor on compliance and security in customer and partner-facing activities.
• Work with the COO and founders to define the strategic IT roadmap.
• Drive the culture of security awareness and good data governance practices across teams.
  
  

Who You Are:

• 6+ years of experience in IT, with proven experience in governance, compliance, and cybersecurity leadership.
• Prior experience as a CISO, IT Governance Manager, or Security/Compliance Lead in a complex technical environment.
• Strong understanding of data governance frameworks, privacy regulations (e.g., GDPR), and lifecycle management.
• Deep knowledge of cybersecurity best practices, risk assessments, and policy development.
• Familiar with cloud governance models (e.g., Azure, AWS), access control, and secure infrastructure design.
• Excellent knowledge of IT compliance standards: ISO27001, NIST, CIS, etc.
• Comfortable working cross-functionally with engineering, legal, operations, and customer-facing teams.
• Strong communication and leadership skills; able to explain complex concepts to diverse audiences.
• Fluent in English; experience working with US partners or stakeholders is highly desirable.
  
  

Bonus Points:

• Familiarity with tools and concepts like IAM, SIEM, SOC2, Red teaming, and DevSecOps.
• Background in designing internal controls and managing audits.
  
  

Start Date:

• ASAP – internal reference if no relevant candidates within one month, strategy check-in on approach