Security Architecture and Design/Associate Lead Architect

Job description

Job description

Some careers shine brighter than others.

If you’re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.

We are currently seeking an experienced professional to join our team in the role of Associate Lead Architect.

In this role, you will:

·  Create security designs for solutions, embed security controls within systems and work with solution and infrastructure architects / engineers to design & build secure and resilient systems across wide variety of technology areas.
·  Participate and contribute in design related forums such as Tech Design Authorities and related working groups and manage all governance requirements. Support teams for security design related decisions.
·  Create security baselines and design patterns on broad set of cloud and other technologies. Conduct security architecture and design reviews as needed.
·  Partner with third parties for SaaS security evaluations, associated controls and the related RFI/RFP processes. Co-ordinate for security evaluations of third party software products.
·  Create, review and ensure good quality of architectural artefacts such as solution design documents, patterns, and governance items such as decision records, technical debt and security risks.
·  Simultaneously work and co-ordinate on multiple projects with wide variety of technology components and requirements.
·  Provide end-to-end ownership of security solutions delivered to meet requirements, delivering the architecture required to realize both functional and non-functional capabilities that aligns to the overall security architecture.
·  Continuously learn emerging technologies related architectural and security aspects.
·  Support ongoing security architecture and design workstreams such as automation, reuse, DevSecOps, engineering best practices and strategy refinement.

Requirements

To be successful in this role, you should meet the following requirements:

·  Extensive experience with cybersecurity architecture and design and key domains like Identity and Access Management aspects such as authentication and authorization and industry standard protocols and practices like OAUTH2, SAML, OIDC, Certificate management, privileged access management and entitlements.
·  In-depth knowledge and experience with Data security elements such as Data security, Cryptography, DLP, Keys and Secrets management, data privacy and all related common security controls.
·  Experience and knowledge of API security, application security, integration patterns, network security, logging and monitoring, enterprise security controls and infrastructure security.
·  Cloud security architecture experience across AWS/GCP/Azure. Strong understanding of SaaS environments.
·  Experience with securing highly available banking applications and systems. Able to do security architecture and design reviews of solutions with knowledge of threat modelling, security testing.
·  Security Solution architecture skills in order to work with architects & engineers to design as per guidelines, best practices and regulatory requirements.
·  Understand the concepts of re-usable security building blocks and how to design them.
·  Security control automation utilizing Fitness Functions, automated CI/CD pipelines (Jenkins, Cloudbees)
·  Ability to create clear, concise proposals for solutions and brokering agreement across multiple stakeholders with strong communication and influencing skills.
·  Experience in an enterprise environment including an understanding of traditional processes and procedures and how they may impact a digital transformation

You’ll achieve more when you join HSBC.

www.hsbc.com/careers

HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website

Issued by – HSDI