Senior Cyber Risk Controller - Global Controls & Assurance

UBS; Raleigh (NC); On-site; USD 200,000 - 275,000; Full time

Job summary

UBS in Raleigh, NC, seeks a senior Cyber Risk professional to join the Global Compliance & Operations Risk Control (GCORC) team. You will protect the firm from cyber and technology risk and influence cross-functional partners across the global risk framework.

The role emphasizes leading remediation, third-party risk, regulatory alignment (SOX), and effective communication with board-level stakeholders. A strong background in IT risk, ITIL, and security controls is required, with 10+ years

Qualifications

• Ideally 10+ years of relevant Cyber/Security experience.
• Experience supporting technology conversations with auditors and regulators.
• Ability to evaluate Cyber Risk testing results and drive remediation with diverse stakeholders.
• Adaptability across cross-functional cyber disciplines (Data Protection, IAM, Cyber Hygiene).
• Experience managing Third-Party Cyber Risks including software risks.
• Understanding of NIST/CRI frameworks.
• Experience in leading, influencing and remediating audit risk reduction.
• Experience in a tightly regulated cyber control environment; SOX exposure advantageous.
• Ability to translate risk assessments into actionable feedback for business partners.
• Excellent written and verbal communication skills.
• Proficiency with ITIL, Secure SDLC, AI and digital asset technologies a plus.
• Certifications such as CISSP, CISA, CEH or equivalents a plus.
• Curiosity about applying AI to improve workflows with sound judgment.

Responsibilities

• Collaborate with GCOO to address cyber risk remediation.
• Formulate cyber risk opinions on emerging and third-party risks.
• Provide challenge and assurance on design and controls across UBS globally.
• Ensure information security risks are understood, owned and managed.
• Review and challenge projects, new initiatives and technology processes.
• Perform data analysis, deep dives, and drive risk initiatives as required.
• Understand regulatory/audit requirements and ensure attention by risk owners.
• Support GCORC with data for reporting to senior management.

Skills

Cyber risk management

Stakeholder management

SOX controls

Audit risk reduction

Regulatory awareness

IT risk frameworks

Communication skills

AI in workflow

Third-Party Risk Management

Data Protection

Identity & Access Management

Tools

ITIL processes

Secure Software Development

TPRM

Job description

UBS in Raleigh, NC, seeks a senior Cyber Risk professional to join the Global Compliance & Operations Risk Control (GCORC) team. You will protect the firm from cyber and technology risk and influence cross-functional partners across the global risk framework.

The role emphasizes leading remediation, third-party risk, regulatory alignment (SOX), and effective communication with board-level stakeholders. A strong background in IT risk, ITIL, and security controls is required, with 10+ years