Senior CORC Cyber Risk Controller

Job Reference #341772BRCityKraków, New York, Raleigh, Stamford, Weehawken, WroclawJob TypeFull Time Key responsibilitiesAre you passionate about protecting the firm from undue Cyber and technology risk? Do you enjoy working within collaborative team to improve the risk posture of the organization? Are you exceptionally good at building relationships and influencing outcomes? We're looking for a CORC Cyber Risk Controller to:collaborate with GCOO colleagues to address short-term and long-term strategic Cyber Risk remediationformulate Cyber Risk opinions, including emerging and Third-Party Cyber Risksprovide credible and actionable challenge and assurance to our First Line of Defense colleagues on the design and operational effectiveness of cyber security and technology controls across UBS globallyensure that information security and Cyber-related risks are understood, owned, and managedprovide review and challenge to our businesses on projects, emerging technologies, new initiatives, technology processes, risk, incidents and controlsperform data analysis, deep dive investigations, controls testing, drive specific risk initiatives as required and in support of activities such as deep dive reviews, and risk assessmentsunderstand and comply with key regulatory and external audit requirements and ensure appropriate treatment and attention is provided by the risk ownersupport the GCORC Risk Management team with relevant data from Cyber Risk team for their reporting delivered to higher managementThe teamYou will be working in our Global Compliance & Operations Risk Control (GCORC) team, part of the Second line-of-defense. Our team brings together skillsets and background in cyber/information security, technical engineering, emerging technologies, IT risk and controls, and a variety of other 1st, 2nd and 3rd line experience. We are a department which values Diversity and Inclusion (D&I) and is committed to realizing the firm's D&I ambition which is an integral part of our global cultural values. Your skills and experienceWe welcome a candidate with proven experience in technology and cyber risk management, including in financial services industry, with an understanding of applying business context to technology risk. Other qualifications include:ideally 10+ years of relevant Cyber/Security experience i.e., leading and/or contributing to Cybersecurity solutionsexperience supporting technology conversations with technology subject matter experts, auditors, and regulatorsability to evaluate Cyber Risk testing results and drive both tactical and strategic remediation outcomes with a diverse group of stakeholdersadaptability to be able to swiftly move between cross-functional cyber disciplines, such as Data Protection, Identity & Access Management, Cyber Hygiene/Defenseexperience of managing Third-Party Cyber Risks, including software risks, incident management calls, Third-Party Risk Management (TPRM)understanding of technology risk / cyber security frameworks (such as NIST & CRI)experience of leading, influencing, negotiating and/or remediating audit risk reductionexperience of working in a tightly regulated Cyber control environment is a must, where experience of working with SOX controls would be advantageousbeing able to combine technical knowledge with risk appetite metrics to drive thematic risk assessments and assurance activitiesexcellent written and verbal communication skillsproven ability to manage work effectively under pressure and deliver work accurately and quicklyability to challenge the status quo and join the dots across disciplinesability to translate risk assessments into clear, actionable feedback for business partners and deliver succinct messages for board level syndicationexperience of ITIL processes, Secure Software Development, software patching lifecycle, AI and digital asset technologies are a pluscertifications such a as CISSP, CISA, CEH or equivalents are a plusYou're curious to explore how AI can improve how we build, deliver, and optimize workflows. You do this with sound judgment – validating outputs and aligning with policies, risk standards, and ethical useAbout usUBS is a leading and truly global wealth manager and the leading universal bank in Switzerland. We also provide diversified asset management solutions and focused investment banking capabilities. Headquartered in Zurich, Switzerland, UBS is present in more than 50 markets around the globe. We know that great work is never done alone. That's why we place collaboration at the heart of everything we do. Because together, we're more than ourselves. Want to find out more? Visit ubs.com/careers.