Stellenangebot
Cloud Security & Risk Engineer
Die UBS Card Center AG sucht in Glatthurg einen Cloud Security & Risk Engineer, der SaaS- und PaaS-Dienste auf Compliance und Sicherheit prüft sowie Security-Tools wie CASB und CSPM verwaltet. Die Rolle umfasst die Automatisierung von Sicherheitskontrollen, die Integration in SOC/SIEM-Plattformen sowie die Beratung bei der sicheren Einführung von Cloud-Lösungen.
Key responsibilities
- Assess SaaS and PaaS services for compliance with internal policies, FINMA, DSG, PD/LDSG, NIS1/2 and data sovereignty requirements
- Enhance and manage security tooling (CASB, CSPM, SSFIM) for third-party cloud services and governance
- Integrate cloud security controls with IOC, SOC and SIEM platforms to detect threat detection and response
- Automate security controls, compliance, and scanning (e.g. AI, ML and code scanning) to enhance visibility and data exchange
- Advise and review cloud solution designs to align with corporate policies and compliance standards
- Support onboarding and secure integration of cloud services
- Collaborate with risk assessment teams and enable business users
Your skills and experience
- Strong experience in risk management
- Deep knowledge of IT security standards (ISO 27001, CIS, CCEM, NIS1 CSF, COBIT, (Cyber) Mure)
- Expertise in SaaS, PaaS, and cloud security implementations
- Hands-on with CASB, CSPM, SSFIM, and integration with SOO/SIEM
- Proven track record in automating security controls and compliance in cloud environments
- Experience with Microsoft Azure and other major cloud platforms
- Skilled in assessing and integrating third-party cloud solutions
- Familiarity with data protection (DSG, GDPR), compliance, and threat modeling
- CCS SP or similar cloud security certifications highly desirable
Jobdetails