Global Head of Red Team

Job description

The Global Head of Red Team role is based within the new IT Security team within HSBC Operating Services and Technologies. The Red Team will be an independent team that will use Cyber Threat Intelligence to deliver adversarial testing with the purpose of improving HSBC’s capabilities.
 
The role of the Global Head of Red team is to use Cyber Threat Intelligence to deliver adversarial testing with the purpose of improving HSBC’s capabilities. You will be leading attack-based security testing, Ethical Hacking and Supplier management. The Red Team will be an independent team comprising between 5 and 15 Full Time Employees and will use many third parties for execution of the above services, using current Cyber Threat Intelligence to deliver on a number of tasks.
 
Your responsibilities will include:
A rolling programme of external attacker-based testing across the estate focusing on high risk / value targets.
Real-life attack scenarios to test and measure our detection capability.
Attack scenarios to test and measure our response capabilities.
Testing scenarios which test both business and technical response capability. E.g. Waking Shark
Determine and benchmark our detection thresholds, silent to noisy.
Validation that detective and preventative technology approaches work on the newest threats.

Desired profile

The ideal candidate for this role will have:
Experience working in relevant environment/s, i.e. Finance
Role relevant qualifications, i.e. Security Testing
Past working experience in a relevant role, i.e. Programme or large Project Management
Role relevant qualifications, i.e. Degree or Equivalent  is desirable but not essential
A track record of delivering significant change which improves business effectiveness in sustainable ways
Proven experience of motivating others to deliver exceptional performance and long terms results
Excellent written and spoken communication skills; an ability to communicate with impact, ensuring complex information is a articulated in a meaningful way to wide and varied audiences
Built effective networks both internally and externally and created opportunities for others to work collaboratively 
A track record of making strategic business decisions, considering relevant risks, long term implications, commercial realities and stakeholders' needs
A successful track record of leading significant and complex business programmes, overcoming challenges to consistently meet/exceed objectives
Promoted and led best practice in risk and compliance management in a similar organisation
 
The base location for this role is Griffin House, Sheffield.
 
Within HSBC certain roles are designated as Enhanced Vetting Roles. For these roles, all internal and external applicants are required (subject to local laws), to pass satisfactorily a series of additional checks both as part of the application process and, if successfully recruited into the Enhanced Vetting role, on an on-going basis. The Group reserves its position with regard to any steps which it may take in relation to any material adverse findings which arise either when the checks are first carried out as part of this recruitment exercise, and/or if relevant, on an on-going basis.
 
This role has been designated as a Enhanced Vetting Role.
 
HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment.
 
Key search words: Cyber security, IT, GCSO, Global Cyber, Cyber Threat Intelligence, adversarial testing