UBS
Join to apply for the
OCRA /Third Party Risk Assessor
role at
UBS
Job Reference #324367BR
Your role You will be responsible for evaluating the security posture of third-party vendors that have access to sensitive information or systems of UBS. You will conduct risk assessments to identify and evaluate potential security threats posed by third-party vendors and recommend risk mitigation strategies to minimize the organization's exposure to cyber threats. You will also work closely with internal stakeholders to ensure that third-party vendors comply with our cybersecurity policies and procedures.
Are you keen on working in world class Cyber Security Operations Center for one of the best Swiss private banks? Do you have related experience and are willing to take it further by learning how to defend an enterprise against cyber-attacks? Do you have the right attitude and are eager to join a multinational team of Cyber Security professionals?
Responsibilities
be responsible for evaluating the security posture of third-party vendors that have access to sensitive information or systems of UBS
conduct risk assessments to identify and evaluate potential security threats posed by third-party vendors and recommend risk mitigation strategies to minimize our organization's exposure to cyber threats and identify potential security threats and vulnerabilities
work closely with internal businesses to ensure that third-party vendors comply with our cybersecurity policies and procedures and conduct Cloud assessments and audits
analyze and evaluate vendor security controls, policies, and procedures to ensure compliance with regulatory requirements and industry best practices
develop and implement risk mitigation strategies to address identified vulnerabilities and reduce our organization's exposure to cyber threats and communicate assessment findings and recommendations to leads, including management, legal, and compliance teams
monitor and track vendor compliance with security policies and procedures through ongoing assessment activities
Qualifications
Bachelor's degree with professional certification in Cybersecurity, Cloud Security, or a related field of study
audit experience/mindset
ideally 5+ years of experience in third-party risk assessment or cybersecurity assessment with strong analytical and problem-solving skills
certifications such as Certified Third-Party Risk Professional (CTPRP) or Certified Information Systems Security Professional (CISSP) are a plus
experience with industry recognized standards for IT security controls and best practices like NIST, ISO27001, PCI DSS, COBIT, SOC 2 etc.
one of the following professional qualifications obtained: CEH, CISSP, CISA, CISM, CRISC or ITIL.
ability to communicate effectively with good spoken and written English
Salary information New York: the salary range for this role is $140000 to $180000
The expected salary range(s) for this role as of the date of this posting is/are based on factors including, but not limited to, experience, qualifications, education, location and skill level. This role may also be eligible for discretionary incentive compensation. For benefits information, please visit UBS.
#J-18808-Ljbffr
OCRA /Third Party Risk Assessor
role at
UBS
Job Reference #324367BR
Your role You will be responsible for evaluating the security posture of third-party vendors that have access to sensitive information or systems of UBS. You will conduct risk assessments to identify and evaluate potential security threats posed by third-party vendors and recommend risk mitigation strategies to minimize the organization's exposure to cyber threats. You will also work closely with internal stakeholders to ensure that third-party vendors comply with our cybersecurity policies and procedures.
Are you keen on working in world class Cyber Security Operations Center for one of the best Swiss private banks? Do you have related experience and are willing to take it further by learning how to defend an enterprise against cyber-attacks? Do you have the right attitude and are eager to join a multinational team of Cyber Security professionals?
Responsibilities
be responsible for evaluating the security posture of third-party vendors that have access to sensitive information or systems of UBS
conduct risk assessments to identify and evaluate potential security threats posed by third-party vendors and recommend risk mitigation strategies to minimize our organization's exposure to cyber threats and identify potential security threats and vulnerabilities
work closely with internal businesses to ensure that third-party vendors comply with our cybersecurity policies and procedures and conduct Cloud assessments and audits
analyze and evaluate vendor security controls, policies, and procedures to ensure compliance with regulatory requirements and industry best practices
develop and implement risk mitigation strategies to address identified vulnerabilities and reduce our organization's exposure to cyber threats and communicate assessment findings and recommendations to leads, including management, legal, and compliance teams
monitor and track vendor compliance with security policies and procedures through ongoing assessment activities
Qualifications
Bachelor's degree with professional certification in Cybersecurity, Cloud Security, or a related field of study
audit experience/mindset
ideally 5+ years of experience in third-party risk assessment or cybersecurity assessment with strong analytical and problem-solving skills
certifications such as Certified Third-Party Risk Professional (CTPRP) or Certified Information Systems Security Professional (CISSP) are a plus
experience with industry recognized standards for IT security controls and best practices like NIST, ISO27001, PCI DSS, COBIT, SOC 2 etc.
one of the following professional qualifications obtained: CEH, CISSP, CISA, CISM, CRISC or ITIL.
ability to communicate effectively with good spoken and written English
Salary information New York: the salary range for this role is $140000 to $180000
The expected salary range(s) for this role as of the date of this posting is/are based on factors including, but not limited to, experience, qualifications, education, location and skill level. This role may also be eligible for discretionary incentive compensation. For benefits information, please visit UBS.
#J-18808-Ljbffr