Senior CORC Cyber Risk Controller

UBS; New York (NY); On-site; USD 200,000 - 275,000; Full time

Job summary

UBS is seeking a senior professional to protect the firm from cyber and technology risk. You will collaborate with GCORC to address remediation, formulate cyber risk opinions, and provide challenge to first line of defense on control design and effectiveness.

Ideal candidates have 10+ years in cyber risk, experience with regulatory expectations, and strong communication skills to translate risk into actionable guidance for business partners and boards.

Qualifications

• 10+ years of Cyber/Security experience in financial services.
• Experience communicating with auditors, regulators, and tech SMEs.
• Ability to translate risk assessments into actionable feedback.
• Experience with cross-functional teams and risk remediation.
• Understanding of NIST/CRI frameworks and SOX controls.
• Experience evaluating Cyber Risk testing results and driving remediation.

Responsibilities

• Collaborate with GCORC to address cyber risk remediation and strategy.
• Formulate cyber risk opinions on emerging risks and third-party risk.
• Challenge and assure design and operation of cyber controls across UBS.
• Ensure information security risks are understood, owned, and managed.
• Review projects and initiatives for risk, incidents and controls.
• Perform data analysis, deep dives, controls testing, and risk assessments.

Skills

Cyber risk management

Regulatory knowledge

NIST/CRI frameworks

SOX controls experience

Data analysis

Stakeholder management

Audit coordination

AI in workflows

Written and verbal communication

Education

CISSP certification

CISA certification

CEH certification

Tools

ITIL processes

Secure SDLC

Job description

Job Type

Full Time

Job Reference #

341772BR

City

Kraków, New York, Raleigh, Stamford, Weehawken, Wroclaw

Key Responsibilities

Are you passionate about protecting the firm from undue Cyber and technology risk? Do you enjoy working within collaborative team to improve the risk posture of the organization? Are you exceptionally good at building relationships and influencing outcomes?

• collaborate with GCOO colleagues to address short-term and long-term strategic Cyber Risk remediation
• formulate Cyber Risk opinions, including emerging and Third-Party Cyber Risks
• provide credible and actionable challenge and assurance to our First Line of Defense colleagues on the design and operational effectiveness of cyber security and technology controls across UBS globally
• ensure that information security and Cyber-related risks are understood, owned, and managed
• provide review and challenge to our businesses on projects, emerging technologies, new initiatives, technology processes, risk, incidents and controls
• perform data analysis, deep dive investigations, controls testing, drive specific risk initiatives as required and in support of activities such as deep dive reviews, and risk assessments
• understand and comply with key regulatory and external audit requirements and ensure appropriate treatment and attention is provided by the risk owner
• support the GCORC Risk Management team with relevant data from Cyber Risk team for their reporting delivered to higher management

The team

You will be working in our Global Compliance & Operations Risk Control (GCORC) team, part of the Second line-of-defense. Our team brings together skillsets and background in cyber/information security, technical engineering, emerging technologies, IT risk and controls, and a variety of other 1st, 2nd and 3rd line experience. We are a department which values Diversity and Inclusion (D&I) and is committed to realizing the firm’s D&I ambition which is an integral part of our global cultural values.

Your Skills And Experience

We welcome a candidate with proven experience in technology and cyber risk management, including in financial services industry, with an understanding of applying business context to technology risk. Other qualifications include:

• ideally 10+ years of relevant Cyber/Security experience i.e., leading and/or contributing to Cybersecurity solutions
• experience supporting technology conversations with technology subject matter experts, auditors, and regulators
• ability to evaluate Cyber Risk testing results and drive both tactical and strategic remediation outcomes with a diverse group of stakeholders
• adaptability to be able to swiftly move between cross-functional cyber disciplines, such as Data Protection, Identity & Access Management, Cyber Hygiene/Defense
• experience of managing Third-Party Cyber Risks, including software risks, incident management calls, Third-Party Risk Management (TPRM)
• understanding of technology risk / cyber security frameworks (such as NIST & CRI)
• experience of leading, influencing, negotiating and/or remediating audit risk reduction
• experience of working in a tightly regulated Cyber control environment is a must, where experience of working with SOX controls would be advantageous
• being able to combine technical knowledge with risk appetite metrics to drive thematic risk assessments and assurance activities
• excellent written and verbal communication skills
• proven ability to manage work effectively under pressure and deliver work accurately and quickly
• ability to challenge the status quo and join the dots across disciplines
• ability to translate risk assessments into clear, actionable feedback for business partners and deliver succinct messages for board level syndication
• experience of ITIL processes, Secure Software Development, software patching lifecycle, AI and digital asset technologies are a plus
• certifications such a as CISSP, CISA, CEH or equivalents are a plus
• You're curious to explore how AI can improve how we build, deliver, and optimize workflows. You do this with sound judgment – validating outputs and aligning with policies, risk standards, and ethical use

About Us

UBS is a leading and truly global wealth manager and the leading universal bank in Switzerland. We also provide diversified asset management solutions and focused investment banking capabilities. Headquartered in Zurich, Switzerland, UBS is present in more than 50 markets around the globe.

We know that great work is never done alone. That's why we place collaboration at the heart of everything we do. Because together, we're more than ourselves.

Salary information

The indicative gross base salary range as a full-time equivalent role:

• United States - New Jersey - Weehawken min USD 200000 - max USD 275000
• United States - New York - New York min USD 200000 - max USD 275000 /annum

The expected salary for this role will be determined by relevant factors which may include but are not limited to, role-required experience, qualifications, education, location and skill level. UBS offers a range of competitive benefits and for further information, please visit ubs.com/employee-benefits. We may, at our sole discretion, provide additional variable compensation or awards.

Join us

At UBS, we know that it's our people, with their diverse skills, experiences and backgrounds, who drive our ongoing success. We're dedicated to our craft and passionate about putting our people first, with new challenges, a supportive team, opportunities to grow and flexible working options when possible. Our inclusive culture brings out the best in our employees, wherever they are on their career journey. And we use artificial intelligence (AI) to work smarter and more efficiently. We also recognize that great work is never done alone. That's why collaboration is at the heart of everything we do. Because together, we're more than ourselves.

We're committed to disability inclusion and if you need reasonable accommodation/adjustments throughout our recruitment process, you can always contact us.

Contact Details

UBS Business Solutions SA
UBS Recruiting

Disclaimer / Policy statements

UBS is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills and experiences within our workforce.