Cyber Assurance Testing Service and Regulatory Specialist

Job Reference #

312830BR

City

London

Job Type

Full Time

Your role

We are expanding our global Red Team (Cyber Assurance Testing) and are looking for a skilled and experienced cyber security specialist to join us. This role will assist in the management of UBS’s internal Cyber Assurance Testing service and play a lead role in the delivery of a growing number of regulatory red team engagements to satisfy the requirements and expectations of financial regulators across the globe.

Candidates will be expected to have some experience of engaging with red team testing and financial regulatory red team engagements (e.g. CBEST, iCAST, TIBER), ideally in a finance sector firm, regulatory or consultancy environment. We are looking for individuals with a deep interest in cyber security, and in particular the emulation of real-world offensive cyber-attacks. Keeping up to date with knowledge of threats, vulnerabilities, and techniques should be something you find fun and interesting rather than just a job requirement.

The role will require strong project and stakeholder management skills, an inquisitive mind, an ability to think outside of the box, and a broad understanding of technical aspects of cyber security. Technical certifications such as CISSP, CCSP, CISM, CREST, OSCP, etc will be advantageous, but they are not a deal breaker. We are primarily concerned with your ability to organize and manage projects, and communicate with technical and non-technical stakeholders at all levels of seniority across and outside of the firm.

The ability to write clear reports in business English is an absolute necessity, as are project management skills and personal organizational ability.

Your Duties and Responsibilities will Include:

1. Contributing to the management of UBS’s internal Cyber Assurance Testing (CAT) service – supporting the ongoing internal testing process and delivery of output.
2. Managing the planning, scoping, execution, and reporting of regulatory red team tests to satisfy regulatory testing frameworks such as CBEST, iCAST and TIBER.
3. Onboarding, contracting and managing third-party red team vendors to deliver regulatory red team testing.
4. Managing relationships with red team testing vendors, senior internal stakeholders, and regulators.
5. Collaborating with blue teams and other cyber defense functions.
6. Developing reports of findings, analysis, and recommendations for internal UBS stakeholders, and contributing to regulatory submissions.
7. Delivering operational briefings and presentations to technical teams, non-technical stakeholders, and senior management.
8. Providing technical cyber security expertise to UBS Group Compliance, Regulatory and Governance (GCRG) Cyber and Technology Risk Control.

Your team

You will be working in the global Cyber Assurance Testing team, with this role based in London. This team delivers red team testing within the firm, as well as regulatory testing delivered by third-party vendors.

Your expertise

1. A strong background and experience in cyber security related to the finance sector.
2. Familiarity with red team testing, cyber-attack chains, and the tools, techniques and procedures used by advanced cyber threat actors.
3. Familiarity with the major cyber security concerns of large finance sector organisations, as well as the primary defensive techniques and approaches deployed to address these.
4. Experience of implementing or working with regulatory red team frameworks such as CBEST, iCAST and TIBER.
5. Excellent written and spoken English, and the ability to describe highly technical and complex matters in a business-focused and risk-centric manner to a range of technical and senior stakeholders.
6. Proven experience in managing senior stakeholders and relationships.
7. Proven project management skills and personal organizational ability.
8. Technical certifications such as CISSP, CCSP, CISM, CREST and OSCP would be advantageous, but are not essential.

About us

UBS is the world’s largest and the only truly global wealth manager. We operate through four business divisions: Global Wealth Management, Personal & Corporate Banking, Asset Management and the Investment Bank. Our global reach and the breadth of our expertise set us apart from our competitors. We have a presence in all major financial centers in more than 50 countries.

Join us

At UBS, we embrace flexible ways of working when the role permits. We offer different working arrangements like part-time, job-sharing and hybrid (office and home) working. Our purpose-led culture and global infrastructure help us connect, collaborate, and work together in agile ways to meet all our business needs.

From gaining new experiences in different roles to acquiring fresh knowledge and skills, we know that great work is never done alone. We know that it\’s our people, with their unique backgrounds, skills, experience levels and interests, who drive our ongoing success. Together we’re more than ourselves. Ready to be part of #teamUBS and make an impact?

Contact Details

UBS Business Solutions SA
UBS Recruiting

Disclaimer / Policy statements

UBS is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills and experiences within our workforce.

#J-18808-Ljbffr