Key responsibilities

• Assess SaaS and PaaS services for compliance with internal policies, FINMA, DSG, PCI DSS (cloud), and data sovereignty requirements
• Enhance and manage security tooling (CASB, CSPM, SSPM) for third-party cloud service governance
• Integrate cloud security controls with SOC and Cyber Defense platforms for effective threat detection and response
• Automate security controls, compliance checks, and integrate security into CI/CD and infrastructure-as-code workflows
• Advise and review cloud solution designs for policy compliance; lead security design reviews and sign-offs
• Support onboarding and secure integration of third-party SaaS/PaaS with internal security processes (IAM, key management, secure data exchange)
• Collaborate with risk assessment teams and key stakeholders across IT, business, and vendors

Join us

UBS Card Center AG with its headquarters in Glattbrugg and an additional office in Manno TI is part of UBS Switzerland AG and employs over 750 people. As the leading credit card processor in Switzerland, we process over 3 million Visa and Mastercard credit cards. In doing so, we stand close by our customers' side - with experience, commitment and vision.

Disclaimer / Policy statements

UBS is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills and experiences within our workforce.

The team

As part of the new "Cloud Center of Excellence" team in the IT department of UBS Card Center AG, you will shape our journey to the cloud by contributing to a strong cloud governance framework together with cloud senior cloud architect and cloud engineers.

Your skills and experience

• Strong experience in risk management, governance frameworks, and Swiss/EU regulatory compliance (FINMA, DSG, PCI DSS)
• Deep knowledge of IT security standards (ISO 27001, CSA-CCM, NIST CSF, COBIT, MITRE)
• Expertise in SaaS, PaaS, and cloud security implications
• Hands-on with CASB, CSPM, SSPM, and integration with SOC/SIEM
• Proven track record in automating security controls and compliance in cloud environments
• Experience with Microsoft Azure and other major cloud platforms
• Skilled in assessing and integrating third-party cloud solutions
• Familiarity with data protection (DSG, GDPR), compliance, and threat modeling
• CCSP or similar cloud security certifications highly desirable