IT Security Manager

Job description

Job description

Some careers have more impact than others.
If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be.

We are currently seeking an experienced professional to join our team in the role of IT Security Manager

Business: Cybersecurity

Principal responsibilities

- Green field opportunity, working with our transformation programme to define and shape a developing approach for Cyber risk consultancy integrating into the end to end procurement process from supplier selection to completed onboarding and issue remediation.
- Acting as a pioneer to prove the developing approach you will engage with other Cyber teams, Third Party Management, and other risk teams to deliver Cyber risk support and assessment of a selection of critical supplier engagements, with an initial focus in the UK.
- Develop as an SME and help to inform wider embedding and training on the consultancy approach to peer TPSA analysts to build and develop the team. 
- Support Control Officers, Risk Stewards, Internal and External Audit, and Regulators with any relevant reviews, examinations and information requests. 
- As a leader within both CSAT and Cybersecurity, the role-holder will be expected to contribute to, be an ambassador for, and to drive delivery of the cybersecurity strategy.
The role functionally reports into Global Head of QA and Consultancy.

The candidate will be able to demonstrate strong leadership; communication in business English – both in verbal and written form; an obsession for delivering high-quality outcomes, whilst often under pressure/at pace; constant curiosity and drive to ensure repeatable outcomes are more effectively achieved; experience in managing and influencing stakeholders from diverse backgrounds and cultures, often remotely, and; leading a global team and relationships with global service providers. The role holder may be required to engage with senior stakeholders including Technology and Cybersecurity leadership in regions; stakeholders across all lines of defence: Chief Controls Office Technology, 2LoD Resilience Risk and 3LoD Internal Audit teams, and will be required to support regulatory examinations.

Requirements

Knowledge & Experience / Qualifications

Mindset
• An inquisitive approach, always asking how to achieve goals in a smarter and more effective way
• Resilient and self driven, capable of informing and driving change
• Positive and professional attitude, team player, flexible and adaptable.

Good Risk and Controls understanding
• Knowledge and exposure of Risk and Control Management frameworks and control design and execution, in theory and practice.
• Ability to understand and articulating defects, threats and technical gaps to both technical and business stakeholders. 
• Bachelor Degree and/or similar experience, preferably in IT security in the Financial Services industry or global corporate service provider
• Have one or more industry-recognised cybersecurity-related certifications including CISA, CISM, CISSP, CRISC and CCSP etc.
• A demonstrable technical understanding in Cloud Security (particularly for SaaS) is desired.

Strong stakeholder management and communications skills
• Experience in third party / supply chain governance
• Experience of working in international and diverse environments
• Experience in engaging with third parties, business, regional and regulator stakeholders
• Ability to communicate to and influence executive leadership – effectively translating technical gaps into business risk
• Ability to prepare concise updates, reports and presentations for senior management
• Ability to manage multiple projects and priorities concurrently.

Effective Change Leader with the ability to complete tasks independently to a high quality standard
• Possess strong leadership and influencing skills to drive and embed change
• Experience within fast-moving, complex and demanding corporate environments able to provide trusted advice and guidance with authority to peers and senior stakeholders

Interpersonal Skills
• Influential, credible and persuasive, active listener, embraces HSBC Values, shows good judgement and demonstrates high level of communication skills in order to achieve effective

Nice to have：

• Relevant Cybersecurity certifications or knowledge is a plus.

HSBCVZ/GZ*

About HSBC Technology China

We develop, implement and support software and IT services and processes that allow HSBC to remain at the forefront of high-quality banking systems. 

You’ll achieve more when you join HSBC. 

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.” 

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website. 

***Issued By HSBC Software Development (GuangDong) Limited***