Business Risk Specialist – Access Control

Your role

Do you recognize the pivotal role of data in driving business success? Are you committed to excellence in information security, risk management, and strategic leadership?

Do you recognize the pivotal role of data in driving business success? Are you committed to excellence in information security, risk management, and strategic leadership?

We’re looking for someone like this who can:

• manage day-to-day entitlement and user access requests (e.g. review and approve access requests for business systems, internet access exceptions and other sensitive entitlement changes) to ensure that employees have appropriate, risk-aligned access to UBS systems. This includes timely processing of Master Access Control (MAC) base role and entitlement approvals, as well as handling internet exception requests in BBS and related platforms.
• assist in maintaining and updating Access Control procedural manuals and processes to reflect new tools (e.g. automation, robotics) and policy changes
• help enhance automation and self-service capabilities within the MAC tool, ensuring that processes are efficient and compliant with internal policy requirements.
• perform ongoing operational risk assessments and control testing related to access management, such as SOX control testing for access controls.
• proactively identify potential risks or control gaps in access granting processes and drive remediation actions to mitigate operational and information security risks.
• prepare and analyze access control metrics and risk reports (e.g. monthly access management metrics and dashboards) to monitor the risk profile of access control activities.
• act as a first-line risk partner by advising and supporting business and IT stakeholders on access control risks and policies. You will work closely with risk owners and control functions (e.g. Business Risk Officers, IT Security, Compliance & Operational Risk Control (C&ORC)) to ensure UBS’s risk strategy and information security policies are effectively communicated, implemented, and enforced in access management processes.

Full Time

339666

Nashville, Weehawken

You’ll be working in the Access Control Business Risk team within Wealth Management Americas (WM US). We are part of the first line of defense, acting as sparring partners to risk owners in managing operational risks associated with employee system access. Our team manages the Master Access Control (MAC) framework – a comprehensive role-based access management system – with a focus on automation, self-service, and improved controls for employee access to UBS systems.

We assist with role creation and modification, enable business application entitlements for employees in both home office and branches, and conduct end-user access reviews to maintain a strong risk and control environment. By ensuring the right people have the right access at the right time, we protect sensitive client and firm data and support smooth business operations while upholding UBS’s risk management standards.

• A bachelor’s or master’s degree in Business, Information Security, Computer Science, or a related field. Relevant professional certifications (e.g., CISSP, CISA, CRISC) are an advantage.
• ideally 3+ years of experience in operational risk management, information security, or access control within the financial services industry. Exposure to identity and access management (IAM) processes or tools is highly beneficial.
• Knowledge of operational risk frameworks and regulatory requirements, including familiarity with Sarbanes-Oxley (SOX) controls and data protection/privacy standards relevant to access management.
• Strong analytical and problem‑solving skills, with experience in evaluating processes, identifying risks or control gaps, and implementing improvements to enhance efficiency and security.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively across teams and clearly communicate risk issues and recommendations to both technical and non‑technical stakeholders.
• A client‑focus and risk‑aware mindset, demonstrating high standards of professional behavior and…