Cloud Security & Risk Engineer 100%

UBS Card Center AG; Glattbrugg; Hybrid; CHF 130.000 - 180.000; Vollzeit

Zusammenfassung

UBS Card Center AG is seeking a security-focused Cloud Center of Excellence member to shape our cloud journey with governance across SaaS/PaaS. You will assess compliance, enhance security tooling, and integrate controls with SOC and CI/CD workflows.

You will advise on cloud design, oversee third-party onboarding, and collaborate with IT, risk, and business stakeholders to strengthen our security posture across cloud environments.

Qualifikationen

• Experience in risk management, governance frameworks, and Swiss/EU regulatory compliance (FINMA, DSG, PCI DSS).
• Deep knowledge of IT security standards (ISO 27001, CSA-CCM, NIST CSF, COBIT, MITRE).
• Hands-on with CASB, CSPM, SSPM, and integration with SOC/SIEM.
• Proven track record automating security controls and compliance in cloud environments.
• Experience with Microsoft Azure and other major cloud platforms.
• Familiarity with data protection (DSG, GDPR) and threat modeling.
• CCSP or similar cloud security certifications desirable.

Aufgaben

• Assess SaaS and PaaS services for compliance with internal policies and regulatory requirements.
• Enhance and manage security tooling for third-party cloud service governance.
• Integrate cloud security controls with SOC and Cyber Defense platforms for threat detection and response.
• Automate security controls, compliance checks, and CI/CD/infrastructure-as-code workflows.
• Advise and review cloud solution designs for policy compliance; lead security design reviews.
• Support onboarding and secure integration of third-party SaaS/PaaS with internal security processes.
• Collaborate with risk assessment teams and stakeholders across IT, business, and vendors.

Kenntnisse

Risk management

Governance frameworks

Regulatory compliance

Cloud security

Automation

Azure

Data protection

CCSP certification

Jobbeschreibung

Your team

As part of the new "Cloud Center of Excellence" team in the IT department of UBS Card Center AG, you will shape our journey to the cloud by contributing to a strong cloud governance framework together with cloud senior cloud architect and cloud engineers.

Your role

• Assess SaaS and PaaS services for compliance with internal policies, FINMA, DSG, PCI DSS (cloud), and data sovereignty requirements
• Enhance and manage security tooling (CASB, CSPM, SSPM) for third-party cloud service governance
• Integrate cloud security controls with SOC and Cyber Defense platforms for effective threat detection and response
• Automate security controls, compliance checks, and integrate security into CI/CD and infrastructure-as-code workflows
• Advise and review cloud solution designs for policy compliance; lead security design reviews and sign-offs
• Support onboarding and secure integration of third-party SaaS/PaaS with internal security processes (IAM, key management, secure data exchange)
• Collaborate with risk assessment teams and key stakeholders across IT, business, and vendors

Your expertise

• Strong experience in risk management, governance frameworks, and Swiss/EU regulatory compliance (FINMA, DSG, PCI DSS)
• Deep knowledge of IT security standards (ISO 27001, CSA-CCM, NIST CSF, COBIT, MITRE)
• Expertise in SaaS, PaaS, and cloud security implications
• Hands-on with CASB, CSPM, SSPM, and integration with SOC/SIEM
• Proven track record in automating security controls and compliance in cloud environments
• Experience with Microsoft Azure and other major cloud platforms
• Skilled in assessing and integrating third-party cloud solutions
• Familiarity with data protection (DSG, GDPR), compliance, and threat modeling
• CCSP or similar cloud security certifications highly desirable

Our offer

At UBS Card Center we embrace flexible working arrangements and offer different working models such as part-time, job-sharing and hybrid working. Our purpose-driven culture and global infrastructure help us connect and collaborate in agile ways to meet all our business needs. A working environment driven by innovation, digitalization, new mobile payment methods and customer experience awaits you.

Our culture

From gaining new experiences in different roles to acquiring fresh knowledge and skills, we know that great work is never done alone. We know that it's our people, with their unique backgrounds, skills, experience levels and interests, who drive our ongoing success. If you value good teamwork, can challenge others but also like to be challenged, then you have the right attitude to grow in our company. Ready to be part of our team and make an impact?