Third Party Cyber Risk Assessor

4 days ago


New York, United States UBS Full time
Your role

Are you keen on working in world class Cyber Security Operations Center for one of the best Swiss private banks? Do you have related experience and are willing to take it further by learning how to defend an enterprise against cyber-attacks? Do you have the right attitude and are eager to join a multinational team of Cyber Security professionals?
We are looking for candidates who have experience in the following areas:
• conduct Cloud assessments and audits
• analyze and evaluate vendor security controls, policies, and procedures to ensure compliance with regulatory requirements and industry best practices
• develop and implement risk mitigation strategies to address identified vulnerabilities and reduce the organization's exposure to cyber threats
• communicate assessment findings and recommendations to internal stakeholders, including management, legal, and compliance teams and monitor and track vendor compliance with security policies and procedures through ongoing assessment activities
• evaluate the security posture of third-party vendors that have access to sensitive information or systems of UBS and conduct risk assessments to identify and evaluate potential security threats posed by third-party vendors and recommend risk mitigation strategies to minimize the organization's exposure to cyber threats
• work closely with internal stakeholders to ensure that third-party vendors comply with our cybersecurity policies and procedures

Your team

You'll be working in the CISO/OCRA (Operational Consolidated Risk assessment) team in New York. You'll take a part in supporting colleagues from different areas of the firm, including Risk Taxonomy Owners, Compliance & Operational Risk Controllers and Outsourcing & Supplier Management, in improving the overall risk assessment process and implementing the most effective remediation measures.

Diversity helps us grow, together. That's why we are committed to fostering and advancing diversity, equity, and inclusion. It strengthens our business and brings value to our clients.

Your expertise
• bachelor's degree with professional certification in Cybersecurity, Cloud Security or a related field of study
• audit experience/mindset, with risk identification and risk articulation skills with strong analytical and problem-solving skills
• ideally 5+ years of experience in third-party risk assessment or cybersecurity assessment
• certifications such as Certified Third-Party Risk Professional (CTPRP) or Certified Information Systems Security Professional (CISSP) are a plus
• experience with industry recognized standards for IT security controls and best practices like NIST, ISO27001, PCI DSS, COBIT, SOC 2 etc...
• one of the following professional qualifications obtained: CEH, CISSP, CISA, CISM, CRISC or ITIL.
• comfortable taking the lead, but not hesitant to bring in the expertise of colleagues to help our team
• available to work in hybrid model at least 3 days from the office

"At UBS, we appreciate our Veterans and are committed to providing opportunities in Financial Services."
*LI-UBS
*UBS-MOGUL

About us

UBS is the world's largest and the only truly global wealth manager. We operate through four business divisions: Global Wealth Management, Personal & Corporate Banking, Asset Management and the Investment Bank. Our global reach and the breadth of our expertise set us apart from our competitors..

We have a presence in all major financial centers in more than 50 countries.

Join us

At UBS, we embrace flexible ways of working when the role permits. We offer different working arrangements like part-time, job-sharing and hybrid (office and home) working. Our purpose-led culture and global infrastructure help us connect, collaborate, and work together in agile ways to meet all our business needs.

From gaining new experiences in different roles to acquiring fresh knowledge and skills, we know that great work is never done alone. We know that it's our people, with their unique backgrounds, skills, experience levels and interests, who drive our ongoing success. Together we're more than ourselves. Ready to be part of #teamUBS and make an impact?

Disclaimer / Policy Statements

UBS is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills and experiences within our workforce.

  • New York, United States UBS Full time

    United States - New York - Business management, administration and support - Group Functions **Job Reference #** - 295454BR **City** - New York **Job Type** - Full Time **Your role** - Are you keen on working in world class Cyber Security Operations Center for one of the best Swiss private banks? Do you have related experience and are willing to take it...


  • New York, United States SMBC Group Full time

    The anticipated salary range for this role is between $194,000.00 and $224,000.00. The specific salary offered to an applicant will be based on their individual qualifications, experiences, and an analysis of the current compensation paid in their geography and the market for similar roles at the time of hire. The role may also be eligible for an annual...


  • New York, United States Sumitomo Mitsui Banking Corporation Full time

    SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group,...


  • New York, New York, United States Credit Agricole Full time

    SummaryPosition based in New York, within the Risk Division, to assist the CUSO (âCombined US Operationsâ) Operational Risk team with oversight of the Third Party Risk Programs within the CUSO perimeter, which currently primarily consists of activities conducted in the US by Credit Agricole Corporate and Investment Bank and Amundi US, along with other...


  • New York, New York, United States Crédit Agricole CIB Limited Full time

    Vacancy detailsGeneral informationEntity About Crédit Agricole Corporate and Investment Bank (Crédit Agricole CIB) Crédit Agricole CIB is the corporate and investment banking arm of Crédit Agricole Group, the 10th largest banking group worldwide in terms of balance sheet size (The Banker, July 8,600 employees in more than 30 countries across Europe, the...


  • New York, United States Pinnacle Group, Inc. Full time

    Job Title: Third Party Risk ManagerLocation: Tampa FL/New York NYJob description:As a Third-Party Risk Management Senior Analyst, you will be responsible for supporting the implementation of the Third-Party Management Policy and Alternative Control Framework Third Party Management Standard across Markets. You will focus on implementing supplier level risk...


  • New York, United States Motion Recruitment Full time

    Join one of the world's most renowned global banks and trusted brand with over 200 years of continuously evolving financial services worldwide. Will focus on implementing supplier level risk assessments and be required to execute various high visibility cross-functional projects by managing within the project plan and working with key partners. You will work...


  • New York, United States Motion Recruitment Full time

    Join one of the world's most renowned global banks and trusted brand with over 200 years of continuously evolving financial services worldwide. Will focus on implementing supplier level risk assessments and be required to execute various high visibility cross-functional projects by managing within the project plan and working with key partners. You will work...


  • New York, United States Bank of China Limited, New York Branch Full time

    Introduction: Established in 1912, Bank of China is one of the largest banks in the world, with over $3 trillion in assets and a footprint that spans more than 60 countries and regions. Our long-term outlook, institutional weight and global breadth provide our clients with a stable and reliable financial partner, whether in Corporate or Personal Banking or...


  • New York, United States Federal Reserve Bank of New York Full time

    Company Federal Reserve Bank of New York Working at the Federal Reserve Bank of New York positions you at the center of the financial world with a unique perspective on national and international markets and economies. You will work in an environment with a diverse group of experienced professionals to foster and support the safety, soundness, and vitality...

  • SVP/ VP

    2 weeks ago


    New York, United States Motion Recruitment Full time

    DETAILS: Domain: Banking Position: (SVP/ VP) – Third Party Risk ManagementDuration: 6 Months (Possibility of extension or conversion)Location: New York City, NY (3 Days/ Week Onsite)The successful candidate will require a comprehensive understanding of third-party risk lifecycle management concepts with specific emphasis on inter-dealer brokers, financial...

  • SVP/ VP

    2 weeks ago


    New York, United States Motion Recruitment Full time

    DETAILS: Domain: Banking Position: (SVP/ VP) – Third Party Risk ManagementDuration: 6 Months (Possibility of extension or conversion)Location: New York City, NY (3 Days/ Week Onsite)The successful candidate will require a comprehensive understanding of third-party risk lifecycle management concepts with specific emphasis on inter-dealer brokers, financial...


  • New York, United States Amaze Systems Inc. Full time

    Job DescriptionJob DescriptionJob Title: Markets Operational Risk and Controls - Third Party RiskLocation: New York, NY (Hybrid) Local preferDuration: 6+ MonthsJob Purpose The Markets Operational Risk and Controls (Operations & Middle Office) Group is a group within Markets responsible for providing front to back connectivity with support functions in...


  • New York, United States Axelon Full time

    Global Financial Firm located in New York City, NY has an immediate contract opportunity for an experienced Third-Party Risk Management Senior Analyst "This role is currently on a Hybrid Schedule. You will need to have reliable internet, computer and android or iphone for remote access into the client systems during remote work. We will be expected in...


  • New York, United States Meta Platforms, Inc. Full time

    We are creating an operationally effective and highly efficient "service of common concern" for all Integrity, Security, Support, and Operations (ISSO) Governance, Risk, and Compliance (GRC) needs, ensuring Integrity, Security, Support, and Operations continue to meet global regulatory requirements and manage risk. Meta's ISSO GRC is the central engine...


  • New York, United States META Full time

    Summary: We are creating an operationally effective and highly efficient service of common concern for all Integrity, Security, Support, and Operations (ISSO) Governance, Risk, and Compliance (GRC) needs, ensuring Integrity, Security, Support, and Operations continue to meet global regulatory requirements and manage risk. Meta's ISSO GRC is the central...

  • Third Party Utility

    4 weeks ago


    New York, United States Mizuho Bank Ltd Full time

    Business Controls Department The Mizuho Americas Business Controls Department (BCD) is a team of first line of defense (1LoD) risk and control professionals performing essential enterprise control functions across the company including Third Party Services, Business Continuity Planning, Data Management Operations, Data Loss Prevention, and Business Risk and...


  • New York, United States Prove Full time

    **About Prove**: As the world moves to a mobile-first economy, businesses need to modernize how they acquire, engage with and enable consumers. Prove’s phone-centric identity tokenization and passive cryptographic authentication solutions reduce friction, enhance security and privacy across all digital channels, and accelerate revenues while reducing...


  • New York, United States Motion Recruitment Full time

    Minimum of 10 years of experience in Third-Party Management, with knowledge of assessing third party risk and associated control requirements within a global financial services organization.Minimum of 5 years of experience in project management, process improvement, change management, governance, and technology within regulated and complex...


  • New York, United States Motion Recruitment Full time

    Minimum of 10 years of experience in Third-Party Management, with knowledge of assessing third party risk and associated control requirements within a global financial services organization.Minimum of 5 years of experience in project management, process improvement, change management, governance, and technology within regulated and complex...