Associate Director, Controls

• Create forward looking view of what the strategy should be with regards to Risk & Control
• Consult on technology projects and provide risk and control subject matter expertise during IT audits and managing sustainable control compliance posture
• Partner with the Business service owners, Business Risk and Chief Control Office Technology functions to promote and provide guidance to relevant policies, standards and governance within the department
• Provide updates with respect to global IT Control uplift programs to stakeholders
• Lead IT engagement with internal / external / client audit and Regulatory Exams, including oversight of field work, collation of artefacts and partnership with CCO tech to remediate issues
• Communicate residual risk through reporting, business governance processes and forums
• Provide visibility of status of action plans and external/internal audit issues through different MIs/Dashboards
• Partner with IT Service Owners and Service line head to identify and assess controls, determine mitigating actions and remediation activities, and understand the overall risk profile
• Attend relevant governance forums to represent service line risk position and remediation plan through different MIs
• Act as a gatekeeper in collection of artefacts and / or evidence for internal/external audits and assessments, and act as POC for auditors and reviewers
• Manage the Risk Acceptance and Exception process through group standard process
• Lead the delivery of risk & control projects and programmes for the Digital IT
• Assist IT Service Owners in responding appropriately and effectively to firm-wide risk, Cybersecurity and corporate control initiative
• Drive ownership and accountability for Risk/Issue and Action Plan Ownership within Service line
• Ability to converse with technical teams and assess their solutions for gaps and issues as well as propose mitigating or compensating controls

• Minimum Bachelor Degree and/or experience in IT Risk and Control, IT security governance and operational processes, preferably in the Financial Services industry or global corporate service provider
• Experience of a control (Risk Management) environment, including reviewing adherence to/enforcing/promoting policies and standards
• Excellent communication skills to articulate at a senior management level, to peers at Group level and to external organizations (Clients, Auditors, Regulators). Ability to communicate technical subject matter to non-technical stakeholders
• Proven ability to prioritise competing demands. Demonstrated ability to assess risk trends. Risk and Issues management - including escalation
• Positive and professional attitude, team player, flexible and adaptable, open to change(s)
• Good spoken and written communication and ability to adapt style based on audience (Fluent in spoken / written English)
• Demonstrated ability to rapidly build relationships with key stakeholders
• Qualifications – desirable but NOT essential one or more industry-recognized certifications including CISA, CISM, CISSP, CRISC

Qualifications – desirable but NOT essential one or more industry-recognized certifications including CISA, CISM, CISSP, CRISC

• HSBC is committed to building a culture where all employees are valued, respected and opinions count
• Continuous professional development
• Flexible working
• Inclusive and diverse environment