Senior Cyber Risk Control & Assurance Lead

UBS; Weehawken (NJ); On-site; USD 200,000 - 275,000; Full time

Job summary

UBS is seeking a senior Cyber Risk professional to join its team in the US. You will lead risk remediation efforts and challenge control designs across the organization, ensuring information security risks are understood and managed.

The role demands collaboration with the GCORC team and First Line of Defense, with a focus on regulatory alignment and third-party risk management. You will influence stakeholders, translate complex risk into actionable guidance, and apply data analytics to drive

Qualifications

• We welcome a candidate with proven experience in technology and cyber risk management, including in financial services industry, with an understanding of applying business context to technology risk.
• Other qualifications include: ideally 10+ years of relevant Cyber/Security experience; experience supporting technology conversations with auditors/regulators; ability to evaluate Cyber Risk testing results and drive remediation outcomes; adaptability to cross-functional cyber disciplines; experience with Third-Party Cyber Risks; understanding of NIST/CRI frameworks; experience leading/auditing; experience in a regulated cyber control environment (SOX helpful); ability to translate risk assessments into actionable feedback; ITIL, Secure SDLC, patching lifecycle, AI/digital assets are plus; certifications such as CISSP, CISA, CEH are a plus; curiosity about AI applications with ethical use.

Responsibilities

• Collaborate with GCOO colleagues to address short-term and long-term Cyber Risk remediation.
• Formulate Cyber Risk opinions, including emerging and Third-Party Cyber Risks.
• Provide credible challenge and assurance to First Line of Defense on design and effectiveness of cyber controls.
• Ensure information security and Cyber risks are understood, owned, and managed.
• Review and challenge projects, new initiatives, and risk-relevant activities.
• Perform data analysis, deep dive investigations, controls testing, drive risk initiatives.
• Support GCORC Risk Management with data for reporting to higher management.

Skills

Cyber risk management

Regulatory & audit knowledge

Stakeholder engagement

Cross-functional collaboration

Communication skills

SOX controls experience

Data analysis

Third-Party Cyber Risks

AI in risk workflows

Tools

ITIL processes

Secure Software Development

Software patching lifecycle

AI in risk workflows

Job description

UBS is seeking a senior Cyber Risk professional to join its team in the US. You will lead risk remediation efforts and challenge control designs across the organization, ensuring information security risks are understood and managed.

The role demands collaboration with the GCORC team and First Line of Defense, with a focus on regulatory alignment and third-party risk management. You will influence stakeholders, translate complex risk into actionable guidance, and apply data analytics to drive