You'll be working in our Investment Bank Tech Risk management team in the UBS Krakow office. It is a global team with presence in the US, Hong Kong, London and Krakow and we are responsible for technology risk management, overseeing risk remediation, and ensuring technology controls are designed and operating effectively. You'll be working closely with your counterparts - business risk managers, Technology Services, and 2nd and 3rd lines of defense.
Are you risk aware? Do you have a proven background in information technology and experience in the financial services industry? We're looking for someone like that to help us to:
- support our key stakeholders with managing their operational risk items, and staying within risk appetite
- review controls and look to automate controls where possible. Also a good understanding of how controls will be managed within cloud environments.
- support the implementation of the Operational Risk Framework
- analyze risk-related metrics, and identify trends, peaks and exceptions
- report Technology risks, control deficiencies and remediation status to our key stakeholders
- maintain relationships with key stakeholders, and partner effectively with 2nd and 3rd lines of defense
- assist with internal and external audits impacting technology
- assist with ad hoc risk and recurring control assessments
- establish and maintain an effective risk culture
MUST
*IT general controls: access management, change control, backup procedures, logging *Cloud environments: understanding of Azure, or GCP risk and control models *Cloud control topics: access control, data encryption, monitoring, shared responsibility *Audit preparation: working with internal and external audits, SOX, financial regulations *Control remediation: tracking findings, coordinating fixes, documenting outcomes *Data analysis: using Excel (pivot tables, lookups, charts), basic SQL or Python a plus *Risk metrics: interpreting and reporting KPIs, KRIs, and trends *Risk tools: experience with JIRA, Confluence, ServiceNow, Archer GRC *Project tracking: prioritizing tasks, following up with tech and business teams *Understanding of IT infrastructure, security, and operations *Knowledge of incident management and disaster recovery *Familiarity with DevOps processes and related risks in cloud/on-prem environments *Communication skills for reporting risks and influencing stakeholders *Certifications like CISA, CISSP, CRISC, or ITIL Foundation are valued
NICE TO HAVE*Experience with cloud security frameworks (e.g. CSA CCM, Azure Security Benchmark) *Familiarity with financial industry regulations (e.g. Basel II/III, MiFID, FINMA) *Knowledge of cybersecurity topics: threat modeling, vulnerability management, SIEM tools *Hands-on experience with risk tools like RSA Archer, MetricStream, or OpenPages *Exposure to Agile or SAFe frameworks and how risk is managed in agile teams *Basic scripting or automation skills (e.g. Python, PowerShell) for control testing or reporting
Luxoft DXC
2000
Luxoft, a DXC Technology Company is a global digital strategy and software engineering firm with over 17,000 international employees within its 58 offices in 29 countries. It is headquartered in Zug, Switzerland.
In January 2019, Luxoft was acquired by U.S. company DXC Technology. Luxoft partnered with LG Electronics to create a next-generation Autonomous Mobility concept vehicle that integrates consumers' personalized digital lifestyles into a driving experience. Luxoft enabled Switzerland's first Blockchain based e-vote platform with the City of Zug and Hochschule Luzern's Blockchain Lab.
Luxoft, a DXC Technology Company is a world-renowned company. It has been present on the Polish market for over 13 years. We have offices in Krakow, Warsaw, Wroclaw, and Gdansk. We employ over 2,000 professional experts carrying out projects for over 100 clients from the financial, automotive, medical, tourist industries, etc. We work for many international clients, including the USA, Great Britain, and Switzerland.
So far, Luxoft Poland has made a name for itself as a company that offers work on innovative projects, we offer various experiences in the field of IT, opportunities for rapid development, an extensive training program, and attractive benefits for employees.
At present, 62% of Luxoft Poland employees come from Poland, and 38% from around 50 countries, including Ukraine, Brazil, India, Turkey, Spain, Portugal, Italy, Romania, USA, etc.
At Luxoft, a DXC Technology Company almost 80 percent of employees are experts with the "Senior" experience level, with at least five years of experience. We care about our employees, so every day we try to provide them with the best possible conditions for work and development.
Technology is our passion! We focus on top engineering talent means that you will be working with the best industry professionals from around the world. Because of that, Luxoft is a global family with an epic atmosphere – we love what we do!