US Resident

The content of our website is not intended for persons resident, or partnerships or corporations organised or incorporated inside the United States (“US Residents”). UBP does not market, solicit or promote its services inside the jurisdiction of the United States at any time. The content provided on the UBP website is intended to be used for general information purposes only. Therefore, nothing on this website is to be construed as an investment recommendation or an offer to buy or sell any security...

  • 欧非中东电子银行

    专为瑞联银行欧非中东私人客户而 设的电子银行服务平台

    Visit
  • 亚洲电子银行

    专门面向瑞联银行的亚洲私人客户的电子银行平台

    Visit

Search

Go Back

Access Management (IAM) Expert

Office
Geneva
Start Date
01.12.2024
Working hours
100%
Type of Contract
Permanent

Description

The COO division encompasses several departments supporting the client-facing teams, with a global presence covering a multitude of activities and client services including Operations, Finance & Tax, Information Technology, Credit, Human Resources, Security & Data Governance, Programme Management and General Services. It strives to provide both in-house departments and external providers with a first-rate service to ensure our business operates efficiently.


Mission

The Identity and Access Management (IAM) Specialist is responsible for the strategic analysis, design, implementation, and maintenance of comprehensive IAM systems and processes within the corporate environment. This senior position requires deep technica


Main responsibilities

  • Contribute to the design and implementation of the organization’s IAM strategy, ensuring alignment with business goals, compliance requirements, and industry best practices.
  • Collaborate with stakeholders across multiple teams to define and implement a scalable, secure IAM architecture, including role-based access frameworks and advanced authentication mechanisms.
  • Drive the configuration, integration, and customization of IAM components, including workflows, role models, and provisioning connectors, ensuring seamless access to IT solutions based on defined specifications.
  • Evaluate and identify new systems and services for integration into the IAM platform, ensuring robust design, testing, and documentation to support operational teams in streamlining and automating access management processes.
  • Develop, refine, and enforce IAM policies and standards, integrating them with the organization’s engineering practices and regulatory requirements.
  • Oversee the implementation of a role-based access control (RBAC) framework, ensuring ongoing alignment with the organization’s evolving needs and risk posture.
  • Act as a subject matter expert across multiple domains of Identity and Access Management and Cybersecurity, with deep knowledge of technologies such as SAML2, OAuth2, OpenID Connect, LDAP, Kerberos, SCIM, RBAC, ABAC, and cloud based IAM solutions. Provide expertise in implementing and integrating advanced authentication protocols, identity federation, and secure access management practices."
  • Provide guidance and mentorship to junior IAM team members, promoting a culture of continuous learning and technical excellence.
  • Maintain comprehensive IAM documentation, including design blueprints, operational guidelines, and troubleshooting procedures, ensuring they are up-to-date and accessible to relevant teams.
  • Contribute to the development of the IAM knowledge base, fostering information sharing and best practices across the organization.
  • Monitor the IAM environment to identify potential security risks, performance issues, or areas for improvement, and take proactive steps to address them.
  • Collaborate with various departments to understand and address IAM-related challenges, ensuring alignment with organizational processes and compliance requirements.

Specific Competencies

  • In-depth knowledge of IAM products (e.g., Microsoft Identity Manager (MiM), OneIdentity, Oracle Identity Manager/Oracle Identity Analytics) and target systems (Active Directory, MS Exchange, databases, LDAP, REST APIs, etc.).
  • Proficiency in IAM concepts and standards such as Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Single Sign-On (SSO), and System for Cross-domain Identity Management (SCIM).
  • Advanced working knowledge of current security standards and protocols, including but not limited to SAML, OAuth, OpenID Connect, and LDAP.
  • Proficient in scripting languages such as PowerShell, with additional programming knowledge in Java or C# being highly advantageous. Experience with database management and SQL is also beneficial.
  • Expertise in the MiM platform, including its design, implementation, configuration, and troubleshooting would be a plus.
  • Ability to design and implement complex IAM solutions that align with strategic business objectives and regulatory requirements.
  • Strong analytical and problem-solving skills with the ability to assess and mitigate risks associated with IAM processes and systems.
  • Solid understanding of HR roles, processes, and challenges, with the ability to translate business requirements into technical IAM solutions.


Personal skills

Self-motivated with the ability to work independently and as a team member with minimal direction. Strong critical thinking, analytical and problem-solving skills. Excellent communication skills with the ability to effectively interact with technical and non-technical stakeholders across various levels of the organization. Experience in working collaboratively in cross-functional teams, with the ability to lead initiatives and drive change. Fluent in English and French. Ethical, discreet, and rigorous.


Education

  • Education: Bachelor Degree
  • Technical skills: Highly technical profile

Experience

  • Years of experience: 7-10 : senior
  • Experience required: BS/BE degree in Information Security/ Computer Science/Electronics and Engineering /Information Technology. Masters in development or cyber security is a plus. 5+ years of experience in Identity and Access Management or other area related to one or more of the following domains: security architecture, security engineering and integration, secure application development or identity federation.
  • Experience in private banking: Preferred

Language

  • French: Fluent
  • English: Fluent

OTHER

  • Swiss resident: Optional

Apply Now Back to list
e-Recruitment Portal – Guidelines for handling personal data supplied by applicants

This online recruitment system (hereinafter, ‘e-Recruitment Portal’ or ‘Portal’) is used by the Geneva headquarters of Union Bancaire Privée, UBP SA (hereinafter, ‘UBP’) in accordance with Swiss law, in particular with regard to data protection, and with the principles below. The e-Recruitment Portal allows any person (hereinafter, ‘Applicant’), excluding recruitment consultants and headhunters, to submit either an application for a vacancy listed on the Portal or an unsolicited application.

UBP guarantees the confidential handling of any personal data received via the e-Recruitment Portal, such as names, addresses and other information relating to the Applicant’s identity and professional history (hereinafter, ‘Personal Data’). The Personal Data are securely saved and stored in-house and can be accessed only by those people dealing with the application. In sending their Personal Data via the e-Recruitment Portal, the Applicant accepts the inherent risks of transmitting data over the Internet, which cannot guarantee the data’s absolute protection and security. In sending their Personal Data to us, the Applicant consents to the use of this data by UBP and/or any affiliate of UBP Group (hereinafter, ‘UBP Group’) as part of the recruitment process, in particular by the human resources departments involved in assessing and following up the application. Should the vacant position be located outside Switzerland or should the Applicant’s profile be of interest to one of UBP Group’s entities abroad, the Applicant agrees in advance that their Personal Data may be transmitted to the entity in question. Moreover, they accept that the law applicable to that entity may not offer legal safeguards equivalent to those of Swiss law, as regards data protection and employees’ rights. UBP also pledges not to divulge, make accessible and/or sell Personal Data to third parties outside UBP Group without the Applicant’s consent, unless the communication of this information is ordered by a state body, a legal or supervisory authority, and/or required by law. Furthermore, if the Applicant supplies the name of a third party to UBP as a reference contact, it is the Applicant’s responsibility to inform the person in question beforehand. The Applicant also agrees to the reference being contacted by representatives of UBP. If the Applicant applies through a recruitment agency or headhunter, as well as via the e-Recruitment Portal, only the application that UBP receives first will be considered. Lastly, the Applicant is reminded that, under Swiss law, they have the right to access data concerning them, as well as the right to correct any inaccurate information that they may have submitted. To do so, the Applicant should contact UBP via the e-Recruitment Portal, clearly stating the subject of the request. The Applicant’s file will be kept as long as it is being processed by the departments concerned within UBP Group. The original documents will then be returned to the Applicant and the copies destroyed, unless the Applicant consents to their being kept on file. By entering Personal Data into UBP’s e-Recruitment Portal, I agree that my data be handled in accordance with the above rules and principles, which I have read and understood. I agree to UBP keeping my application on file, should UBP believe that my profile might be relevant to another position in the future.

订阅瑞联通讯