Head of Application Security Tooling

Job description

The Head of Application Security Tooling role is based within HSBC Operations, Services and Technology, (HOST) and specifically within Information Technology Security, Application Security.   IT Security serves as a focal point in IT for security related activities, ensuring that HSBC’s electronic based assets are monitored, managed, accessed  and protected effectively so that only those people with a legitimate business need can access or modify them, when they need to do so.  Within IT Security, Application Security will be the global security function for all the IT supported software utilised by the Bank's data.
 
The role of the Head of Application Security Tooling is to be a key member of the Application Security Management team.  This team will ensure that HSBC Application Security tools are operating as required, by either owning or working with the relevant team in supporting and maintaining the tools.  Such tools will include Security Testing tools used by both Development staff and Security Testers.  IT will also include other tooling utilised by Application Security processes for risk assessment, including threat modelling and architectural analysis used as a self assert / self certification as well as security consultants and analysts.
This is a global role, ensuring consistency in approach across all regions and lines of business and functions; as such, experience of working in Global company is ideal.
 
This new role will enable the postholder to shape how tooling for Application Security is developed within a truly Global company. The role offers flexible working patterns (including the ability to work from home at least 1 day a week) as well as access to future career development opportunities across a breath of Security, IT and Business areas, with full support and training provided.
 
The post-holder will be offered access to an on site gym, subsidised on-site catering and various social events.
 
Your responsibilities will include:
Identifying, selecting and implementing security scanning tools for use by software developers and security testers
Managing tools used by developers and security testers, establlishing policies and standards to govern use of tools in application security
Managing automated workflow tooling for risk application secuirty processes
Functional and / or direct management of people, spread across varied geographies

Desired profile

The ideal candidate for this role will have:
Relevant product knowledge including knowledge of Application Security Tooling technologies eg Fortify / AppScan / Checkmarx
Experience working in relevant environment/s, i.e. various Integrated Development Environments eg Java IDE, Eclipse, IntelliJ, IBM Rational Applicantion Development / RAD
Experience working in relevant market/context, i.e. Finanical Services
Past working experience in a relevant role, i.e. Software Developer / Security Tester / Penetration Tester / Application Tester
Availability to undertake the travel required for this role, i.e. Occasional UK and International travel is required
- possibly a couple of times per year
Past working experience in a relevant role, i.e. Application Security is desirable but not essential
Proven experience of leading the delivery of an excellent customer service and proactively look for innovative ways to improve the service delivered to customers 
A track record of delivering significant change which improves business effectiveness in sustainable ways
Proven experience of motivating others to deliver exceptional performance and long terms results
A flexible and adaptable management style with experience of developing yourself and others
Excellent written and spoken communication skills with experience of successfully influencing others, negotiating effectively and winning over audiences with compelling and persuasive presentations
Built effective networks both internally and externally and created opportunities for others to work collaboratively 
A track record of making strategic business decisions, considering relevant risks, long term implications, commercial realities and stakeholders' needs
Proven experience of successful project management, utilising relevant tools and techniques to ensure consistent delivery
Promoted and led best practice in risk and compliance management in a similar organisation
Acted as a strategic advisor to customers, having established and built valuable long-term relationships with significant customers
 
The base location for this role is Griffin House, Sheffield
 
HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment.
 
Key search words: Application Security, Security testing / Tools used for software security processes, penetration testing, infrastructure testing, manager, enterprise tooling, Sheffield, Yorkshire