Control Architect (Security IT Area)

UBS' Operational Risk Framework (ORF) requires that for each risk category controls are defined. Functions are required to identify and implement specific Key Procedural Controls (KPC) relevant to their activities that support the mitigation of operational risk. A Key Procedural Control Instance (KPCi) is the implementation of the KPC in a specific business unit (the 'Instance'). As a Control Architect you will work with Group Technology (GT) Process Owners, Policy and Standards owners and Key Procedural Control Instance (KPCI)Owners/Operators to provide guidance and oversight on KPCi design, implementation, assessment and remediation across GT processes

The role will be located in the UBS offices in Krakow and in Wroclaw.

Wymagania

Responsibilities: Control Design & Implementation
• Working with policy and standards owners to ensure the KPC framework is fit for purpose
• Advising KPCi Owners on the design of appropriate KPCis
• Demonstrating appropriate control design, implementation and operating effectiveness
• Ensuring there is a reciprocal agreement for all controls delegated across functions
• Driving industrialization and control commonality across GT

Control Assessment
• Reviewing KPI documentation, its control, infrastructure components and relevant material
• Reviewing and signing off final results of KPC assessments in close collaboration with the Security IT control owner(s)
• Co-creating Group Technology COO ICAP summary report and other information in scope KPCIs.

Control Remediation
• Ensuring draft ORIs created by GT Process & KPCi Owners comply with the ORI guidelines
• Overseeing ORI status for specific KPC areas including issue and action ownership
• Ensuring creation of new KPCi's where required to ensure sustainability of CtB related remediation of ORI and GIA items

Control Monitoring & Awareness
• Establishing and monitoring monthly activityiesto provide early warning of control defects across KPC areas

Requirements:
• Experience working across multiple teams and functions
• Very good written and spoken English and German
• Sound knowledge of control design and testing, specifically in the area of Information Technology
• Strong leadership, stakeholder management and influencing skills
• Ability to adapt quickly to new processes with strong customer service skills

Additional assets:
• Several years of experience in the field of IT Security (data protection, application security, identity & access management, cybersecurity)

UBS offers talented individuals around the world a challenging, diverse and supportive working environment in which passion, commitment and hard work are valued and rewarded.