IT Security Lead – Middleware

Job description

Description
 
Some careers grow faster than others.
 
If you’re looking for further opportunities to develop your career, take the next step in fulfilling your potential right here at HSBC.
 
HSBC Technology and Services
 
HSBC Technology and Services is a pivotal part of the Group, providing essential operational and technical support to our global businesses and helping improve customer service and efficiency. HTS combines global expertise and technology to help keep us ahead of the competition.
 
Global Software Delivery
 
Within HSBC Technology and Services, Global Software Delivery enables HSBC to remain at the leading edge in the development and delivery of high-quality, customized banking systems. The division provides tailored, cost-competitive and robust banking solutions and services that offer a flexible and scalable framework for delivering projects on time, within budget and at the highest quality, meeting both the current and future IT challenges facing the Group.
 
We are currently seeking a high caliber professional to join our team as a IT Security Lead
- Middleware.
 
Job Location: Pune, India
 
Role Purpose :
-  Define, implement and maintain Global Infrastructure Security controls across multiple technologies (to include but not limited to middleware (web and application servers, messaging, integration)
Define and maintain security standards and key risk indicators
Conduct risk assessments/gap analysis reviews to establish risks and recommend additional control requirements.
Provide project consultancy and guidance on solutions and security architecture for line of business projects.
Participate in architecture review process
Assist with ensuring audit issues are addressed
Prepare and communicate status reports, risks and issues to project governance bodies and management.
Maintain positive and collaborative working relationships with all key stakeholders
Oversee and assist with projects aimed at managing and reducing risk
 
Principal Accountabilities: Key activities and decision making areas
Typical Targets and Measures
Impact on the Business/Function
Providing expert advice and guidance
Provide centralized service with reduced associated costs
Ensure control implementation costs are commensurate and balanced with the risk
Reducing risk exposure
 
 
Customers / Stakeholders
Regional and Global ISR teams
HTS IT Operations (ITO) – CS/ES&A, Architecture etc.
HTS Software Delivery (SWD)
HTS BRCM
Audit
 
 
Leadership & Teamwork
Work closely with IT operations and information security project managers, subject matter experts and regional leads across the globe
Global working with regional dispersed contacts
Contribute and work as part of wider infrastructure security team
Conduct and participate in working groups
Provide guidance and support to all customers/stakeholders
 
 
Operational Effectiveness & Control
Define and drive implementation of allocated security standards globally.
Provide specialist knowledge and guidance on enhanced controls
Ensure consistency around the group
Formally report activities on a regular basis
Perform an annual risk assessment of technologies within scope
Based on the risk assessment recommend projects to mitigate any identified risks or exploit relevant opportunities.
 
Adherence to the Group’s agreed processes/procedures
Globally consistent processes and documentation delivered to enhance reuse and efficiency.

Desired profile

Technical Skills 
· In depth technical/SME knowledge of multiple technologies ( middleware
- web application,  messaging, Cognos,SAS, Connect Direct, HIS, IBM Portal Services,etc)· Well developed knowledge of risk management and information security processes and practices · Ability to identify risk and propose proportionate mitigating controls· Architectural knowledge and service design
 
Qualifications
 
Graduation.
 
You’ll achieve more at HSBC.
 
HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.