Enterprise Application Assurance Architect

x

The Enterprise Application Assurance Architect  is part of the IT Enterprise Architecture (EA) team and is responsible for ensuring the security of Sonova’s application landscape. The role ensures that new and existing applications meet information security requirements and that risks are properly identified, documented, and managed according to Sonova’s security standards and regulatory expectations.

The position focuses on assessing applications, identifying security design gaps, and recommending architectural controls aligned with enterprise architecture principles and security directives.

More about the role :

• Drive the evolution of enterprise security architecture in alignment with EA principles and security standards.

• Perform security assessments for new applications, major changes, and vendors (including custom and SaaS solutions).

• Review security documentation (e.g., ISO 27001, SOC 2, pen-test reports, architecture diagrams) and assess risks.

• Identify security gaps and recommend risk-based remediation and security-by-design controls.

• Document recommendations and support the risk management process, escalating issues when required.

• Contribute to the Enterprise Architecture Review Board with security recommendations.

• Collaborate with architects and cross-functional teams (Security, Legal, Data Privacy, IT Infrastructure, SecOps).

• Support continuous improvement of security assessment processes and provide insights on risk trends and compliance.

More about you :

• 10+ years of IT experience, including security architecture or security engineering in enterprise environments.

• Degree in Computer Science, Information Management, Business IT, or equivalent experience.

• Security certification (e.g., CISSP, CISM) or equivalent professional experience.

• Strong knowledge of security architecture, risk and compliance alignment, and audit-ready controls.

• Broad understanding of application and integration security (IAM/PAM, cloud, data, network security, logging/monitoring, vulnerability management).

• Experience reviewing technical security documentation and performing vendor or third-party security assessments.

• Strategic thinker aligning business, risk, and security architecture.

• Strong communicator simplifying complex security topics.

• Pragmatic and solution-oriented approach.

• Collaborative leadership in matrix environments.

• Continuous learning mindset.

• Professional proficiency in English.

More about what we offer :

As one of the world’s leading hearing care providers headquartered in Switzerland, we’re committed to building an inclusive culture. We want to create an environment where you can balance a successful career with your commitments and interests outside of work, through our flexible hybrid working model. We offer a wide range of training opportunities for both your professional and personal development, and there are exceptional growth opportunities with individual development plans.