Senior CORC Cyber Risk Controller

UBS; Weehawken (NJ); On-site; USD 200,000 - 275,000; Full time

Job summary

UBS is seeking a senior Cyber Risk professional to join its team in the US. You will lead risk remediation efforts and challenge control designs across the organization, ensuring information security risks are understood and managed.

The role demands collaboration with the GCORC team and First Line of Defense, with a focus on regulatory alignment and third-party risk management. You will influence stakeholders, translate complex risk into actionable guidance, and apply data analytics to drive

Qualifications

• We welcome a candidate with proven experience in technology and cyber risk management, including in financial services industry, with an understanding of applying business context to technology risk.
• Other qualifications include: ideally 10+ years of relevant Cyber/Security experience; experience supporting technology conversations with auditors/regulators; ability to evaluate Cyber Risk testing results and drive remediation outcomes; adaptability to cross-functional cyber disciplines; experience with Third-Party Cyber Risks; understanding of NIST/CRI frameworks; experience leading/auditing; experience in a regulated cyber control environment (SOX helpful); ability to translate risk assessments into actionable feedback; ITIL, Secure SDLC, patching lifecycle, AI/digital assets are plus; certifications such as CISSP, CISA, CEH are a plus; curiosity about AI applications with ethical use.

Responsibilities

• Collaborate with GCOO colleagues to address short-term and long-term Cyber Risk remediation.
• Formulate Cyber Risk opinions, including emerging and Third-Party Cyber Risks.
• Provide credible challenge and assurance to First Line of Defense on design and effectiveness of cyber controls.
• Ensure information security and Cyber risks are understood, owned, and managed.
• Review and challenge projects, new initiatives, and risk-relevant activities.
• Perform data analysis, deep dive investigations, controls testing, drive risk initiatives.
• Support GCORC Risk Management with data for reporting to higher management.

Skills

Cyber risk management

Regulatory & audit knowledge

Stakeholder engagement

Cross-functional collaboration

Communication skills

SOX controls experience

Data analysis

Third-Party Cyber Risks

AI in risk workflows

Tools

ITIL processes

Secure Software Development

Software patching lifecycle

AI in risk workflows

Job description

Job Type

Full Time

Job Reference #

341772BR

City

Kraków, New York, Raleigh, Stamford, Weehawken, Wroclaw

Key Responsibilities

Are you passionate about protecting the firm from undue Cyber and technology risk? Do you enjoy working within collaborative team to improve the risk posture of the organization? Are you exceptionally good at building relationships and influencing outcomes?

• collaborate with GCOO colleagues to address short-term and long-term strategic Cyber Risk remediation
• formulate Cyber Risk opinions, including emerging and Third-Party Cyber Risks
• provide credible and actionable challenge and assurance to our First Line of Defense colleagues on the design and operational effectiveness of cyber security and technology controls across UBS globally
• ensure that information security and Cyber-related risks are understood, owned, and managed
• provide review and challenge to our businesses on projects, emerging technologies, new initiatives, technology processes, risk, incidents and controls
• perform data analysis, deep dive investigations, controls testing, drive specific risk initiatives as required and in support of activities such as deep dive reviews, and risk assessments
• understand and comply with key regulatory and external audit requirements and ensure appropriate treatment and attention is provided by the risk owner
• support the GCORC Risk Management team with relevant data from Cyber Risk team for their reporting delivered to higher management

The team

You will be working in our Global Compliance & Operations Risk Control (GCORC) team, part of the Second line-of-defense. Our team brings together skillsets and background in cyber/information security, technical engineering, emerging technologies, IT risk and controls, and a variety of other 1st, 2nd and 3rd line experience. We are a department which values Diversity and Inclusion (D&I) and is committed to realizing the firm’s D&I ambition which is an integral part of our global cultural values.

Your Skills And Experience

We welcome a candidate with proven experience in technology and cyber risk management, including in financial services industry, with an understanding of applying business context to technology risk. Other qualifications include:

• ideally 10+ years of relevant Cyber/Security experience i.e., leading and/or contributing to Cybersecurity solutions
• experience supporting technology conversations with technology subject matter experts, auditors, and regulators
• ability to evaluate Cyber Risk testing results and drive both tactical and strategic remediation outcomes with a diverse group of stakeholders
• adaptability to be able to swiftly move between cross-functional cyber disciplines, such as Data Protection, Identity & Access Management, Cyber Hygiene/Defense
• experience of managing Third-Party Cyber Risks, including software risks, incident management calls, Third-Party Risk Management (TPRM)
• understanding of technology risk / cyber security frameworks (such as NIST & CRI)
• experience of leading, influencing, negotiating and/or remediating audit risk reduction
• experience of working in a tightly regulated Cyber control environment is a must, where experience of working with SOX controls would be advantageous
• being able to combine technical knowledge with risk appetite metrics to drive thematic risk assessments and assurance activities
• excellent written and verbal communication skills
• proven ability to manage work effectively under pressure and deliver work accurately and quickly
• ability to challenge the status quo and join the dots across disciplines
• ability to translate risk assessments into clear, actionable feedback for business partners and deliver succinct messages for board level syndication
• experience of ITIL processes, Secure Software Development, software patching lifecycle, AI and digital asset technologies are a plus
• certifications such a as CISSP, CISA, CEH or equivalents are a plus
• You're curious to explore how AI can improve how we build, deliver, and optimize workflows. You do this with sound judgment – validating outputs and aligning with policies, risk standards, and ethical use

About Us

UBS is a leading and truly global wealth manager and the leading universal bank in Switzerland. We also provide diversified asset management solutions and focused investment banking capabilities. Headquartered in Zurich, Switzerland, UBS is present in more than 50 markets around the globe.

We know that great work is never done alone. That's why we place collaboration at the heart of everything we do. Because together, we're more than ourselves.

Salary information

The indicative gross base salary range as a full-time equivalent role:

• United States - New Jersey - Weehawken min USD 200000 - max USD 275000
• United States - New York - New York min USD 200000 - max USD 275000 /annum

The expected salary for this role will be determined by relevant factors which may include but are not limited to, role-required experience, qualifications, education, location and skill level. UBS offers a range of competitive benefits and for further information, please visit ubs.com/employee-benefits. We may, at our sole discretion, provide additional variable compensation or awards.

Join us

At UBS, we know that it's our people, with their diverse skills, experiences and backgrounds, who drive our ongoing success. We're dedicated to our craft and passionate about putting our people first, with new challenges, a supportive team, opportunities to grow and flexible working options when possible. Our inclusive culture brings out the best in our employees, wherever they are on their career journey. And we use artificial intelligence (AI) to work smarter and more efficiently. We also recognize that great work is never done alone. That's why collaboration is at the heart of everything we do. Because together, we're more than ourselves.

We're committed to disability inclusion and if you need reasonable accommodation/adjustments throughout our recruitment process, you can always contact us.

Contact Details

UBS Business Solutions SA
UBS Recruiting

Disclaimer / Policy statements

UBS is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills and experiences within our workforce.