UBS Card Center AG - Cloud Security & Risk Engineer 100% (w/m/d)

In UBS Card Center AG’s Cloud Center of Excellence, you shape cloud governance and security across SaaS and PaaS. You will align cloud designs with FINMA, DSG and PCI DSS requirements and drive automation of security and compliance in CI/CD workflows. You’ll integrate security controls with SOC and threat detection platforms, while collaborating with IT, risk, and business stakeholders. This role offers the opportunity to influence cloud strategy and enable secure cloud adoption at scale.

• Assess SaaS/PaaS for compliance with internal policies, FINMA, DSG, PCI DSS, and data sovereignty requirements
• Enhance and manage security tooling (CASB, CSPM, SSPM) for third-party cloud governance
• Integrate cloud security controls with SOC and Cyber Defense platforms for threat detection and response
• Automate security controls, compliance checks, and integrate security into CI/CD and IaC workflows
• Advise and review cloud solution designs for policy compliance; lead security design reviews and sign-offs
• Support onboarding and secure integration of third-party SaaS/PaaS with IAM, key management, secure data exchange
• Collaborate with risk assessment teams and key stakeholders across IT, business, and vendors

• Strong experience in risk management, governance frameworks, and Swiss/EU regulatory compliance (FINMA, DSG, PCI DSS)
• Deep knowledge of IT security standards (ISO 27001, CSA-CCM, NIST CSF, COBIT, MITRE)
• Expertise in SaaS, PaaS, and cloud security implications
• Hands-on with CASB, CSPM, SSPM, and integration with SOC/SIEM
• Proven track record in automating security controls and compliance in cloud environments
• Experience with Microsoft Azure and other major cloud platforms
• Skilled in assessing and integrating third-party cloud solutions
• Familiarity with data protection (DSG, GDPR), compliance, and threat modeling
• CCSP or similar cloud security certifications highly desirable

• collaboration with cross-functional teams
• stakeholder communication
• attention to detail
• CASB
• CSPM
• SSPM