ome careers shine brighter than others.

If you’re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.

Our Technology teams work closely with HSBC’s global businesses to help design and build digital services that allow our millions of customers around the world; to bank quickly, simply and securely. We also run and manage our IT infrastructure, data centres and core banking systems that power the world’s leading international bank.

Our multi-disciplined Technology teams include amongst others: DevSecOps engineers, IT architects, front and back-end developers, infrastructure specialists, cybersecurity experts, and delivery, project and programme managers.

Following extensive investment across our Technology and Digital domains and with plans for continued expansion, we are seeking a Lead Consultant for “Threat and Controls Assessment”, to join the HSBC Cybersecurity team within Technology.

.

Brief overview of the business areas

Global Cybersecurity is responsible for enabling businesses and functions to manage their information, technology and cybersecurity risks by ensuring these are well-understood, and that controls used the manage such events are defined, assessed and implemented appropriately. Cybersecurity deliver this via objective, independent, professional and specialized subject matter experts. The role forms part of the 1LoD in relation to risk management framework.

The Cybersecurity Assessment and Testing (CSAT) function, part of Global Cybersecurity, is accountable for Vulnerability Management, Secure Development, Threat and Controls Assessment (threat modelling) and Third Party Security Assessment. The function drives the identification, capture, assessment, testing and ultimately the remediation of security defects, gaps and vulnerabilities across HSBC’s estate in concert with business and technology teams – on premise, within the Cloud and resulting from 3rd party engagements.

What you will be doing;

The Threat and Controls Assessment Lead Consultant role will work as part of the global team to perform Threat Modelling on HSBC services.

This is a senior role reporting into the Threats and Controls Assessment Regional Lead, closely collaborating with peers across Penetration Testing; Secure Development, Third Party Security Assessment and Cybersecurity business and regional leads, enabling effective end-to-end vulnerability identification.

Key Responsibilities:

· Perform effective threat and control assessments for complex services and platforms across the HSBC estate. This will include cloud platform reviews for Azure, AWS and GCP

· Liaise with Developers, Architects and other Technical Leads to understand the end to end service and identify where there are any control gaps

· Work with the CSAT management team to enhance the Threats and Controls Assessment Service.

· Provide cybersecurity consultancy with HSBC Business and Functions

· Manage the team of resources and take responsibility that their deliveries are meeting the quality expectations.

· Stay up to date within the industry of new trends and best practices

· Provide supervision, guidance and mentor less experienced members of the global team

· Act as a point of contact and source of advice on issues relating to Cybersecurity within the team

What you will bring to the role;

To be successful in this role you should have proven experience within the Technology sector with knowledge of the following skills:

Mindset

· An inquisitive approach, always asking how to achieve goals in a smarter and more effective way

· An ability and interest to learn and experiment with new approaches to vulnerability management, in different contexts, across the amazing scale that HSBC brings.

· Stay up to date within the industry of new trends, and best practices

Good Risk and Controls understanding

· Knowledge and exposure of Risk and Control Management

· Ability to understand and assess both threats, controls and vulnerabilities, articulating these to both technical and business stakeholders.

· Knowledge of different frameworks and methodologies including Threat Modelling using STRIDE and the MITRE ATTCK Framework.

· Desirable to have one or more industry-recognised cybersecurity-related certifications including CISSP, CRISC, CISM or Cloud Security Certifications