ASSOCIATE IT SECURITY MANAGER

Job description

Job description

Some careers have more impact than others.
If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be.

We are currently seeking an experienced professional to join our team in the role of ASSOCIATE IT SECURITY MANAGER.

Business: Cybersecurity 

Principal responsibilities 

·  Analyse and execute activities to ensure compliance with HSBC Cybersecurity policies and standards.
·  Contribute to process, procedures and tool identification/development that will strength the bank’s response to threats and incidents
·  Managing Engagements, Business Impact Assessments, Guidance requests, Quality Assurance
·  Managing other team members as appropriate
·  Act as a role model to more junior members of the team
·  Provide guidance on appropriate actions to manage resultant issues/risks, and monitor that timely action is being taken, leveraging formal governance where required.
·  Support evolution of the third party security assessment approach and service to:
·  Work with Control Officers, Risk Stewards, Internal and External Audit, and Regulators on assurance reviews, examinations and information requests. Drive to closure all action items.
·  Support the global head and global delivery lead with key stakeholders and peer teams within Businesses, Procurement and Technology to ensure supporting processes (such as accurate inventories) are appropriately defined and delivered.
·  The role functionally reports into either the Global Head of Third Party Security Assessment, or a Regional head of Third Party Security Assessment

Requirements

Knowledge & Experience / Qualifications
The candidate will be able to demonstrate: strong leadership; communication in business English – both in verbal and written form; an obsession for delivering high-quality outcomes; constant curiosity and drive to ensure repeatable outcomes are more effectively achieved; experience in managing and influencing stakeholders from diverse backgrounds and cultures, often remotely. 
The role holder may be required to engage with senior stakeholders including Technology and Cybersecurity leadership in regions; stakeholders across all lines of defence: 

·  Good Risk and Controls understanding
·  Knowledge and exposure of Risk and Control Management methodologies and processes
·  (Desirable) Have one or more industry-recognised cybersecurity-related certifications including CISA, CISM, CISSP, CRISC and CCSP etc.
·  Strong stakeholder management and communications skills
·  Experience in third party governance
·  Experience of working in international and diverse environments
·  Experience in engaging with third parties, business, regional and regulator stakeholders
·  Ability to communicate to and influence– effectively translating technical gaps into business risk
·  Ability to manage multiple projects and priorities concurrently.
·  Leadership capability with ability to complete tasks independently to a high quality standard
·  Possess good leadership skills able to manage work of one or more junior team members if required or act as a leader representing Cyber in larger project teams
·  Experience within fast-moving, complex and demanding corporate environments and able to provide appropriate direction to junior team members, or project / engagement teams whilst dealing with ambiguity and change
Interpersonal Skills
·  Influential, credible and persuasive, active listener, embraces HSBC Values, shows good judgement and demonstrates high level of communication skills in order to achieve effective stakeholder management
·  Background - desirable but NOT essential one or more; risk management, Audit, ISR
·  Qualifications - desirable but NOT essential one or more; ISO270001, CISA, CISM, CISSP, CRISC

HSBCVZ/GZ*

About HSBC Technology China

We develop, implement and support software and IT services and processes that allow HSBC to remain at the forefront of high-quality banking systems.

Candidate with less relevant experience or skills may be offered a lower Global Career Band than stated above.

（Due to the urgent hiring need, candidates with immediate right to work locally and no relocation need will be prioritised.） 

You’ll achieve more when you join HSBC. 

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.” 

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.