CyberSecurity Frontline Risk and Control Manager

About the role

Lead and strengthen UBP’s first line of cyber defence by overseeing security risk governance and vulnerability management. Partner with technology, business, risk and compliance teams to proactively manage cyber risks and ensure regulatory compliance.

Key responsibilities

• Own and evolve the cybersecurity risk management framework, policies, standards and control catalogue for the first line of defence.
• Drive risk identification, assessment, treatment planning and maintain risk registers and KRIs.
• Lead enterprise vulnerability management strategy, scanning, risk‑based prioritisation and remediation across infrastructure, applications, cloud and third‑parties.
• Interpret and operationalise cyber regulatory requirements (FINMA, EU/DORA, UK PRA/FCA, HKMA, MAS) and support audit and board reporting.
• Manage and mentor a small team, fostering a risk‑aware culture across technology and business functions.

Required profile

• 8‑12+ years of cybersecurity experience with first‑line risk and control management in a regulated bank.
• Deep knowledge of global banking regulations (FINMA, EU, UK, Hong Kong, Singapore) and ability to operationalise them.
• Strong communication skills to convey complex cyber risk topics to senior executives and non‑technical stakeholders.

Required skills

• Frameworks/standards: NIST CSF, NIST 800‑53, ISO/IEC 27001/27002/27005, OWASP, CIS Controls, MITRE ATT&CK.
• Vulnerability‑management tools: Qualys, Tenable, Rapid7, SAST, DAST, SCA, CSPM, EDR/XDR.
• Enterprise environments: Windows, Unix, networks, databases, micro‑services, SaaS, public cloud (AWS, Azure, GCP).
• Secure SDLC, DevSecOps, CI/CD integration of security controls.