Head of IDPS and DDoS

Job description

Job description

Head of IDPS and DDoS

Join a digital first bank that’s powered by people.

Our technology team builds innovative digital solutions rapidly and at scale to deliver the next generation of banking services for our customers around the world.

In our cybersecurity team you’ll be helping to safeguard the financial system on which millions of people depend.

You’ll be making banking more secure by designing, implementing, and operating controls to manage cybersecurity risk. You’ll help define HSBC Group cyber security standards, deliver Global Security Operations ad Threat management services, provide round-the-clock monitoring and security incident response services, and oversee Network/Application/Infrastructure Security. The work you do will provid3e assurance of the adequacy and effectiveness of security controls to Business Risk Owners.

Head of IDPS and DDoSand Analysis is a capability owner role and reports to the Global Head of Network Security.

Capability owners define and maintain Capability Strategy, supported by Enterprise Architecture, Security Architecture and Control Owners, in response to business strategies, regulator expectations, technology and practise advancement, best practise and threat actor evolution, they also runs / drives respective Delivery forums, QBRs, SteerCos and Capability PODs.

As an HSBC employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution.

In this role you will:

• Defines & delivers vision, strategy & roadmap of the Capability. 
• Prioritises teams' backlogs based on objectives & value released to identify what teams work on next. 
• Lead definition of scope and prioritisation of user stories to be developed in teams, including acceptance criteria/definition of done. 
• Leads vendor relationships with owned technologies.
• Interacts with stakeholders across the organisation to understand their security needs and expectations. 
• Evaluate and adoption of new technologies and practices which may impact the control environment. 
• Runs a Pod per L2 capability with Architecture, Engineering, Service Delivery, Control Owner, Program Manager and Product Management 

Requirements

To be successful in this role you should meet the following requirements:

• Demonstrated leadership experience with large, complex programmes, and deeply technical global expert
• Understanding and knowledge of common industry cyber security frameworks, standards, and methodologies, including OWASP, ISO2700x series, PCI DSS, GLBA, GDPR, Global data security and privacy acts, FFIEC guidelines, CIS and NIST standards.
• Experience working within Cloud, SaaS and emerging cloud use-cases for web/mobile and enterprise companies.
• A background in information systems, technology, architecture, design, and service delivery of defense-in-depth capabilities.   
• Strong stakeholder management skills, with experience of understanding and meeting the needs of multiple stakeholders.
• An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative and actionable manner.
• Proven ability to collaborate across industry, academia, and government to solve complex cybersecurity problems.
• Excellent understanding of cybersecurity principles, global financial services business models, as well as regional compliance standards, relevant local regulations, and applicable laws.
• Experienced in owning a capability, technology, or platform together with the responsibilities associated with running a team of up to 20 individuals.
• Seasoned technology leader with rich experience of leading engineering teams, supporting a group of platforms / services comprised of a mix of technologies and tools.

This role is based in Sheffield .

Opening up a world of opportunity

Being open to different points of view is important for our business and the communities we serve. At HSBC, we’re dedicated to creating diverse and inclusive workplaces. Our recruitment processes are accessible to everyone -  no matter their gender, ethnicity, disability, religion, sexual orientation, or age.

We take pride in being part of the Disability Confident Scheme. This helps make sure you can be interviewed fairly if you have a disability, long term health condition, or are neurodiverse.

If you’d like to apply for one of our roles and need adjustments made, please get in touch with our Recruitment Helpdesk:

Email: hsbc.recruitment@hsbc.com
Telephone: +44 207 832 8500