Business Risk Specialist

The role:

Crisis Management and Information Security team has been organized around various areas of expertise - one of them is user identity and access management and following responsibilities such as performing user entitlement review in order to ensure the accuracy and relevance of users access rights.

The role is located in the UBS office in Zabierzow (Krakow Business Park).

Responsibilities:

• Providing administrative, technical and professional support to UBS Krakow Business Solution Centre
• Assisting local Business Risk Manager with the implementation and consistent operation of Information Security processes and principles
• Cooperating with BCM and Information Security Teams located in London and Zurich
• Participating in and leading projects to enhance risk and Information Security Awareness framework in our company
• Reviewing user access entitlement for systems, applications, unstructured data sources (SharePoint, share drives, etc.)
• Controlling internally developed Business Solution Centre systems and “End User Applications”
• Performing initial IT Risk assessments and cooperating with Group IT Risk teams
• Controlling physical access management

Requirements:

• Experience in IT Risk, Information Security or related areas
• Very good written and spoken English
• Advanced MS Office skills, especially in MS Excel and MS Access
• Ability to work well in a fast paced, constantly changing environment
• Ability to multitask and to meet specific goals set by supervisors and management
• Willingness to understand business process delivery context and to analyse and solve issues in a complex environment
• Dependable to be at work during assigned shifts and to complete work as expected
• Ability to build strong relationships within the company

Additional assets:

• Bachelor degree (or equivalent) in Computer Science, Engineering or other related
• Strong interest in Information Security, information risk management in capital market/finance industry
• Security strategy (including physical security precautions)
• Security architecture design and implementation
• Security assessments, including penetration testing
• Identity access management - Previous experience in Identity Management - preferable
• Privacy and Data Protection