Senior CORC Cyber Risk Controller

Are you passionate about protecting the firm from undue Cyber and technology risk? Do you enjoy working within collaborative team to improve the risk posture of the organization? Are you exceptionally good at building relationships and influencing outcomes?

We’re looking for a CORC Cyber Risk Controller to:

• collaborate with GCOO colleagues to address short-term and long-term strategic Cyber Risk remediation
• formulate Cyber Risk opinions, including emerging and Third-Party Cyber Risks
• provide credible and actionable challenge and assurance to our First Line of Defense colleagues on the design and operational effectiveness of cyber security and technology controls across UBS globally
• ensure that information security and Cyber-related risks are understood, owned, and managed
• provide review and challenge to our businesses on projects, emerging technologies, new initiatives, technology processes, risk, incidents and controls
• perform data analysis, deep dive investigations, controls testing, drive specific risk initiatives as required and in support of activities such as deep dive reviews, and risk assessments
• understand and comply with key regulatory and external audit requirements and ensure appropriate treatment and attention is provided by the risk owner
• support the GCORC Risk Management team with relevant data from Cyber Risk team for their reporting delivered to higher management

Your team

You will be working in our Global Compliance & Operations Risk Control (GCORC) team, part of the Second line-of-defense. Our team brings together skillsets and background in cyber/information security, technical engineering, emerging technologies, IT risk and controls, and a variety of other 1st, 2nd and 3rd line experience. We are a department which values Diversity and Inclusion (D&I) and is committed to realizing the firm’s D&I ambition which is an integral part of our global cultural values.

Your expertise

We welcome a candidate with proven experience in technology and cyber risk management, including in financial services industry, with an understanding of applying business context to technology risk. Other qualifications include:
• ideally 10+ years of relevant Cyber/Security experience i.e., leading and/or contributing to Cybersecurity solutions
• experience supporting technology conversations with technology subject matter experts, auditors, and regulators
• ability to evaluate Cyber Risk testing results and drive both tactical and strategic remediation outcomes with a diverse group of stakeholders
• adaptability to be able to swiftly move between cross-functional cyber disciplines, such as Data Protection, Identity & Access Management, Cyber Hygiene/Defense
• experience of managing Third-Party Cyber Risks, including software risks, incident management calls, Third-Party Risk Management (TPRM)
• understanding of technology risk / cyber security frameworks (such as NIST & CRI)
• experience of leading, influencing, negotiating and/or remediating audit risk reduction
• experience of working in a tightly regulated Cyber control environment is a must, where experience of working with SOX controls would be advantageous
• being able to combine technical knowledge with risk appetite metrics to drive thematic risk assessments and assurance activities
• excellent written and verbal communication skills
• proven ability to manage work effectively under pressure and deliver work accurately and quickly
• ability to challenge the status quo and join the dots across disciplines
• ability to translate risk assessments into clear, actionable feedback for business partners and deliver succinct messages for board level syndication
• experience of ITIL processes, Secure Software Development, software patching lifecycle, AI and digital asset technologies are a plus
• certifications such a as CISSP, CISA, CEH or equivalents are a plus
• You’re curious to explore how AI can improve how we build, deliver, and optimize workflows. You do this with sound judgment – validating outputs and aligning with policies, risk standards, and ethical use

About us

UBS is a leading and truly global wealth manager and the leading universal bank in Switzerland. We also provide diversified asset management solutions and focused investment banking capabilities. Headquartered in Zurich, Switzerland, UBS is present in more than 50 markets around the globe.
We know that great work is never done alone. That’s why we place collaboration at the heart of everything we do. Because together, we’re more than ourselves. Want to find out more? Visit ubs.com/careers.

Join us

At UBS, we know that it's our people, with their diverse skills, experiences and backgrounds, who drive our ongoing success. We’re dedicated to our craft and passionate about putting our people first, with new challenges, a supportive team, opportunities to grow and flexible working options when possible. Our inclusive culture brings out the best in our employees, wherever they are on their career journey. And we use artificial intelligence (AI) to work smarter and more efficiently. We also recognize that great work is never done alone. That’s why collaboration is at the heart of everything we do. Because together, we’re more than ourselves.
We’re committed to disability inclusion and if you need reasonable accommodation/adjustments throughout our recruitment process, you can always contact us.

Disclaimer / Policy statements

UBS is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills and experiences within our workforce.