Sr. Associate Director, Cybersecurity

Some careers have more impact than others.

If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be.

We are currently seeking an experienced professional to join our team in the role of Sr. Associate Director, Cybersecurity

Business: Cybersecurity

Job ID：49371

Principal responsibilities

• Drive holistic and effective threat and control assessment, ensuring the swift and continuous capture of all vulnerabilities within our internal, external and cloud estate.
• Define, implement, operate and monitor threat and controls assessment of systems for pre-deployment and postproduction, both via manual, ad-hoc and automated capabilities. This includes but is not limited to on premise IT assets, cloud, infrastructure assets and business applications.
• Collaborate with the Global, Regional and Country representatives of Technology plus other peer managers to implement the team’s goals within entity policy, expense and regulatory constraints.
• Lead and support peers within the Cybersecurity function to define and implement an industry leading Cybersecurity Service that supersedes our constantly changing information security threats.
• Contribute to the Sub-function/Region Cybersecurity strategy to secure the bank’s technology from the inside out, whilst maintaining, protecting and enhancing HSBC’s values, reputation and stakeholder value
• Responsible for ensuring effective engagement with Businesses/Regions
• Management responsibility for a team, providing clear direction, setting performance targets of direct reports and contributing to employees’ professional development
• Define, plan and lead change activities for driving capability uplift and process improvements.
• Providing leadership to direct team on all threats and controls assessment services within region.
• Lead initiatives to develop and build security processes to enable others to operate more efficiently and securely
• Work with the other regions to ensure a consistent approach to Threat and Controls Assessment
• Stay up to date within the industry of new trends, and best practices
• Act as a point of contact and source of advice on issues relating to information security within the associated region

Knowledge & Experience/Qualifications

To be successful in this role you should have proven experience within the Technology sector with knowledge of the following skills:

Mindset

• An inquisitive approach, always asking how to achieve goals in a smarter and more effective way
• Curiosity to explore how AI changes the threat landscape, and a pragmatic approach to balancing innovation with responsible risk management.
• An ability and interest to learn and experiment with new approaches to vulnerability management, in different contexts, across the amazing scale that HSBC brings.

Good Risk and Controls understanding

• Knowledge and exposure of Risk and Control Management
• Ability to understand and assess both threats, controls and vulnerabilities, articulating these to both technical and business stakeholders.

Strong Technical background

• Proven experience in general security concepts and principles and application specific security concepts and principles.

• Proven experience working in a large scale, multi-national and technologically diverse environment
• Hands-on experience with threat modelling and strong technical understanding and experience of assessing vulnerabilities and identifying weaknesses in diverse enterprise IT assets
• Strong understanding of applications design and architecture
• Strong understanding of Software Development Life Cycle (SDLC) with a focus on security

• Professional IT Security qualifications and/or certification
• Knowledge of Governance, Risk & Compliance
• Experience in continuous improvement and process optimization.
• Knowledge and experience with network, host and application security practices
• Excellent analytical skills, organizational skills, ingenuity and the ability to work as part of a team

• Have a minimum of 5 years in a Cybersecurity role
• Have a minimum of 3 years leadership (projects, resource etc.)

Strong stakeholder management and communications skills

• Experience of working in international and diverse environments
• Experience in managing high-performing individuals in different geographies, often remotely
• Experience in engaging with business, technology, regional and regulator stakeholders
• Ability to communicate to executive leadership – effectively translating technical gaps into business risk
• Ability to prepare concise presentations and updates for senior management

Effective Team Lead combined with ability to complete tasks independently to a high quality standard

• Possess strong leadership skills to bring out the best in a team. This includes both direct leadership and cross-functional capabilities
• Experience within fast-moving, complex and demanding corporate environments and able to provide appropriate direction to the team whilst dealing with ambiguity and change

Interpersonal Skills

• Influential, credible and persuasive, active listener, embraces HSBC Values, shows good judgement and demonstrates high level of communication skills in order to achieve effective stakeholder management

Some travel will be required – expected once to twice a year.

You’ll achieve more when you join HSBC. 

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.”

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

***Issued By HSBC Software Development (GuangDong) Limited***