Job description
Job Reference #
City
Job Type
Your role
At UBS, we have re-imagined the way we work, the way we connect with each other – our colleagues, clients and partners – and the way we deliver value. Being agile will make us more responsive, more adaptable, and ultimately more innovative.
We’re looking for a cyber audit subject matter expert to:
- have responsibility for the effective delivery and quality of risk assessment, audit and issue assurance work as Chapter Lead of the Cyber agile pod in the GOTO, GHR and GCS audit stream
- understand the strategy, context and risks of cyber and information security including but not limited to threat management, protection, detection and response capabilities, security operations, assurance, governance and risk management, and prioritize the pod’s work accordingly to help achieve the GOTO audit stream’s objectives
- be responsible for delivering impactful risk focused insights to our stakeholders through the execution of thematic and front-to-back reviews and audits of the activities owned by the Technology Information Security office & the Chief Information Security (CISO) office, while ensuring audit and audit-related work meets coverage, quality and audit methodology requirements
- mitigate impediments to the team’s goals, align across pods and with crew leads and act as your pod’s ambassador towards our stakeholders
- motivate and energize pod members and contribute to their growth and well-being and define the set of necessary competencies in the pod, in cooperation with the crew leads and chapter leads (where required) and provide regular feedback to ensure high performance
- as an inspirational manager, coach and collaborative colleague for the Cyber pod, coaching and supporting the growth and career progression of your chapter members, fostering a culture of empowerment and collaboration and cultivate high standards in audit, issue assurance and risk assessment delivery in support of the Stream’s strategy and objectives
Your Career Comeback
Your team
Your expertise
- ideally 7+ years in a similar position focused on IT Audit/Cyber Security within the financial services industry or a global consulting firm; proven experience in conducting cyber security audits including auditing cyber security governance, cyber operations centers, vulnerability management, access management, configuration management, perimeter security (including network and firewall architecture), logging and monitoring, threat identification and response, cyber incident management and cloud security
- a team player with an enthusiastic and proactive personality, a true agile mindset and strong analytical and problem-solving skills, with sound judgment for when to escalate issues
- strong active listening and communication skills to build networks and partnerships at all levels & strong communication skills, both written and verbal, to effectively communicate audit findings and recommendations to technical and non-technical stakeholders
- working in agile environments with strong understanding of agile delivery frameworks and product ownership (such as chapter lead role in a scrum team)
- ability to work independently and in a team-oriented environment, managing multiple projects and priorities simultaneously with appropriate outcome-focused goals, such as using OKRs (Objectives and Key results)
- commitment to keeping up with industry, regulatory developments and learning new concepts and methods. Familiarity with industry regulations and compliance standards, such as ISO 27001, NIST, and GDPR
#LI-Hybrid
- LI-GB
About us
With more than 70,000 employees, we have a presence in all major financial centers in more than 50 countries. Do you want to be one of us?
Join us
From gaining new experiences in different roles to acquiring fresh knowledge and skills, we know that great work is never done alone. We know that it's our people, with their unique backgrounds, skills, experience levels and interests, who drive our ongoing success. Together we’re more than ourselves. Ready to be part of #teamUBS and make an impact?
Disclaimer / Policy Statements