Cyber Risk Metrics Analyst

Are you a cybersecurity professional who is passionate about cyber risk management Do you enjoy partnering across the IT organization and solving complex and technologically challenging problems Are you high energy with strong communication skills that you would like to use to push boundaries of the firm's understanding of cyber risk and controls Are you self-driven, motivated, and interested in working in a global cyber security team In the Cyber Risk Metrics Analyst role, you will formulate and agree metrics collaboratively with various stakeholders (metric consumers, metric owners, business management, metrics governance, IT providers) across IT to enable adequate monitoring of cyber risk and controls. You will ensure the build of the metrics by CISO IT partners to specification, evolve the existing metrics based on the changing risk and control landscape, and ensure timely and quality delivery of metrics for various management reporting purposes, including to Business Risk Forums, Cyber Info Sec Committee, and Group Executive Board. Additionally, you will develop long-term relationships with security professionals and other stakeholders across the organization to ensure effective delivery of required metrics and collaborate in multi-disciplinary teams on change initiatives across different geographies and business divisions. Your team will consist of members of the Data Management, Analytics & Cyber Maturity Measurement team in Group CISO based in Pune. Your expertise should include strong problem-solving skills with a structured but pragmatic attitude, the ability to think from first principles, and being a quick learner. You should be CISSP certified or equivalent with overall 12+ years of experience, ideally with 5 or more years in technical security covering multiple cyber security domains such as network security, database security, cloud security, vulnerability and patch management, key management, endpoint security, application security, infrastructure and system hardening, identity and access management, crisis management, or supply chain security risk management. Furthermore, you should possess strong technical skills to evaluate the effectiveness of security control implementation against threats and risk scenarios, knowledge of cyber security risk management and control frameworks, operational threat management frameworks, data science skills, exposure to technology and cyber and information security regulatory requirements, and experience in an operational security role with a desire to shift towards a governance and risk role. Understanding the financial services industry is also important. UBS, the world's largest and the only truly global wealth manager, operates through four business divisions: Global Wealth Management, Personal & Corporate Banking, Asset Management, and the Investment Bank. With a presence in all major financial centers in more than 50 countries, UBS offers flexible ways of working, including part-time, job-sharing, and hybrid arrangements. The purpose-led culture and global infrastructure support connection, collaboration, and agile ways of working to meet business needs. UBS is an Equal Opportunity Employer that values and empowers diversity within its workforce. If you are ready to be part of #teamUBS and make an impact, join us in driving ongoing success together.,