IT & Risk Control Specialist

Job Description Job Reference # 326618BR Job Type Full Time Your role Do you have experience with IT risk and security related topics Are you passionate about technology and possess a solid business understanding of IT security, data confidentiality and data protection Do you have a strong understanding of IT system design and the ability to assess the risks associated with IT solutions We are looking for someone like this who can help us to: - manage the exception process for security controls , including intake, review, risk assessment and approval as part of established workflows. - partner with subject matter of experts and control owners to evaluate, design & administer exception requirements in alignment with organizational security standards and policies. - monitor and track exceptions through their lifecycle, ensuring timely remediation or renewal where necessary. - collaborate with key stakeholders and IT partners to enhance exception governance workflows, and tooling (e.g., automation for exception handling). - prepare and present reports and metrics on exception trends, risks, and compliance status to senior management and risk committees. - support internal and external audits by providing evidence and documentation related to exception management process. - stay informed about emerging IT risk, security, and regulatory trends to ensure continuous alignment of exception management with industry best practices. Your team You will be part of the global Cyber & Information Security Office team, responsible for data protection governance and advisory. Our team's primary functions include managing exceptions to company security policies, alongside providing best practice guidance on the architecture and design of IT systems to ensure compliance with legal and business security requirements. In this role, you will work closely with application developers and architects, security experts, risk functions, and divisional security officers to ensure effective collaboration and alignment. Your expertise You have: - strong knowledge of information security policies, controls and frameworks, with a focus on exception and risk management. - proven experience in governing exception/risk acceptance processes. - experience with risk, and compliance tools, as well as workflow automation platforms (a plus). - excellent communication and stakeholder management skills, enabling effective engagement with both technical and business teams. - first-hand experience in creating functional / business requirements specifications related to exception and risk management. - experience in managing related to client data confidentiality, EU General Data Protection (EUGDPR), compliance, risk management, risk control, threat modelling is a plus - bachelor's/master's degree or equivalent in Information Technology / Cyber Security / Computer Science or related disciplines - familiarity with IT security management systems, control frameworks, and certifications such as ISO 27001, NIST, COBIT, and MITRE, with a focus on their application in exception and risk management (a plus). - First experience in reporting tools (e.g., Power BI) to create and maintain dashboards for tracking and visualizing key metrics. You are: - keen to serve the client through a team approach, drawing upon the know-how of other specialists - a strong communicator, comfortable interacting with colleagues at all levels - well structured, very reliable and dedicated; have a high attention to detail and the ability to handle a significant number of dependencies and issues ensuring nothing is missed out - able to apply technical understanding to practical problems - a result-oriented worker, with the ability to set priorities and take accountability - inclusive and reflective - curious and agile - innovative and capable of using data and digital solutions to transform About Us UBS is the world's largest and the only truly global wealth manager. We operate through four business divisions: Global Wealth Management, Personal & Corporate Banking, Asset Management and the Investment Bank. Our global reach and the breadth of our expertise set us apart from our competitors. We have a presence in all major financial centers in more than 50 countries. How We Hire We may request you to complete one or more assessments during the application process. Learn more Join us At UBS, we know that it's our people, with their diverse skills, experiences and backgrounds, who drive our ongoing success. We're dedicated to our craft and passionate about putting our people first, with new challenges, a supportive team, opportunities to grow and flexible working options when possible. Our inclusive culture brings out the best in our employees, wherever they are on their career journey. And we use artificial intelligence (AI) to work smarter and more efficiently. We also recognize that great work is never done alone. That's why collaboration is at the heart of everything we do. Because together, we're more than ourselves. We're committed to disability inclusion and if you need reasonable accommodation/adjustments throughout our recruitment process, you can always contact us. Disclaimer / Policy Statements UBS is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills and experiences within our workforce.