{"id":2239582,"url":"https://alion.io/job/ubp-cybersecurity-frontline-risk-and-control-manager","title":"CyberSecurity Frontline Risk and Control Manager","company":{"id":451139,"name":"UBP","domain":"ubp.com","url":"https://alion.io/company/ubp-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":93,"open_postings":10,"ghost_share":0,"stale_share":0.1,"repost_share":0,"time_to_fill_p50_days":113,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Geneva, Switzerland"],"countries":["CH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":87000,"max_usd":201000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2225},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false}],"status":"closed","first_seen_at":"2026-06-09T10:26:58Z","employer_posted_date":"2026-06-09","last_verified_at":"2026-10-23T04:15:29Z","board_verified":false,"closed_at":"2026-10-23T04:15:29Z","days_open":135,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":134},"description":"Mission\nLead and strengthen UBP’s cybersecurity first line of defence by overseeing Security Risk & Governance and Vulnerability Management. Establish, maintain, and evolve a robust, transparent control framework aligned to global banking regulations (FINMA, EU, UK, Hong Kong, Singapore). Partner with Technology, Business, Risk, and Compliance stakeholders to proactively manage cyber risks, ensure regulatory adherence, and safeguard UBP’s clients and assets.\nMain responsibilities\nGovernance & Risk Management\nOwn and evolve the cybersecurity risk management framework, policies, standards, and security controls catalogue for first line of defence.\nDrive risk identification, assessment, and ensure that adequate and achievable treatment plans are defined and implemented in effective timescales.\nMaintain risk registers and key risk indicators (KRIs). Ensure discrete risks are clearly identified, challenged and catalogued without duplication or unnecessary overlap.\nEnsure alignment with group risk appetite, regulatory expectations, and industry best practices (ISF, NIST CSF, ISO/IEC 27001/27005).\nVulnerability Management\nLead enterprise vulnerability management strategy and operations (infrastructure, applications, cloud, third parties).\nOversee vulnerability scanning, assessment, risk-based prioritisation, and timely remediation in line with SLAs.\nPartner with Infrastructure, DevSecOps, and application owners to embed secure-by-design principles and shift-left controls.\nReport on exposure, trends, and risk posture to senior management and risk committees.\nRegulatory Compliance & Audit Support\nInterpret and operationalize cyber requirements across FINMA, EU (including DORA/NIS2 where applicable), UK (PRA/FCA), Hong Kong (HKMA), and Singapore (MAS).\nPrepare evidence and responses for internal/external audits, regulatory exams, and board-level reporting.\nMaintain control mapping to regulatory frameworks; ensure continuous readiness and closure of findings.\nManage and mentor a small team; build capabilities and career growth for junior staff.\nCommunicate complex cyber risk topics clearly to senior management and non-technical stakeholders.\nChampion a risk-aware culture across technology and business functions.\nLeadership & Stakeholder Management\nManage and mentor a small team; build capabilities and career growth for junior staff.\nCommunicate complex cyber risk topics clearly to senior management and non-technical stakeholders.\nChampion a risk-aware culture across technology and business functions.\nYour Profile\nExperienced cybersecurity risk leader with deep first line of defense experience in financial services.\n\nStrong knowledge of regulatory environments across Switzerland (FINMA), EU, UK, Hong Kong, and Singapore, with proven ability to operationalize requirements.\n\nStrategic thinker with hands-on rigor-able to sustain current frameworks while maturing them for scalability and transparency.\n\nInfluential communicator and collaborative partner comfortable engaging senior executives and guiding junior staff.\n\nEducation\nBachelor’s or master’s degree in information security, Computer Science, Engineering, Risk Management, or a related field.\n\nRelevant certifications preferred: CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, CEH, or equivalent.\n\nExperience Technical skills\n8-12+ years in cybersecurity with significant exposure to first line risk and control management in a regulated bank.\n\nProven track record in:\n\nDesigning and operating cyber risk and control frameworks (policies, standards, KRIs/KPIs, control testing).\n\nLeading enterprise vulnerability management (tools, processes, SLAs, metrics, remediation governance).\n\nRegulatory engagement, audit response, and evidence management.\n\nCross-border regulatory alignment (FINMA, EU/DORA, UK PRA/FCA, HKMA, MAS).\n\nPractical familiarity with:\n\nFrameworks/standards: NIST CSF, NIST 800-53, ISO/IEC 27001/27002/27005, OWASP, CIS Controls, MITRE ATT&CK.\n\nVM tooling & ecosystems: Qualys/Tenable/Rapid7, SAST/DAST, SCA, container and cloud posture management (CSPM), EDR/XDR.\n\nEnterprise environments: Windows/Unix, networks, databases, microservices, SaaS, public cloud (AWS/Azure/GCP).\n\nSecure SDLC/DevSecOps and CI/CD integration of controls.\n\nReporting and metrics for executive forums and risk committees.\n\nLanguages\nEnglish: fluent (written and spoken).\n\nFrench - strong advantage.\n\nPersonal skills\nLeadership: coaching mindset, able to build high-performing teams and upskill junior colleagues.\n\nCommunication: clear, concise, and audience-appropriate; strong presentation and writing skills.\n\nDecision-making: risk-based prioritisation, data-driven, and pragmatic under time pressure.\n\nCollaboration: strong stakeholder management across IT, Risk, Compliance, and business lines.\n\nAdaptability: navigates ambiguity; balances regulatory rigor with business practicality.\n\nIntegrity: high professional ethics and commitment to client and bank protection.\n\nOthers\nLocation: Geneva\n\nSwiss Residence\n\nHybrid working arrangements aligned with UBP policy.\n\nCandidates must have the right to work in the relevant jurisdiction.\n\nBackground checks required consistent with banking standards.\n\nCore Competencies : Adherence to the company’s values: Dedication, Conviction, Agility and Responsibility - Compliance with regulations and internal directives","description_format":"text","description_chars":5361,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"Switzerland","iso":"CH","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Commercial & Retail Banks","Asset Management & Funds"],"lifecycle":[{"event":"open","at":"2026-10-11T01:03:16Z"},{"event":"close","at":"2026-10-23T04:15:29Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/ubp-cybersecurity-frontline-risk-and-control-manager","json_url":"https://alion.io/job/ubp-cybersecurity-frontline-risk-and-control-manager.json","meta":{"generated_at":"2026-10-24T20:42:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30209,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":451139},"rest":"https://alion.io/mcp/rest/get_company?id=451139"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fubp-cybersecurity-frontline-risk-and-control-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fubp-cybersecurity-frontline-risk-and-control-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fubp-cybersecurity-frontline-risk-and-control-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ubp-cybersecurity-frontline-risk-and-control-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fubp-cybersecurity-frontline-risk-and-control-manager"}]}