Cybersecurity Operations Manager, HSBC

HSBC

Location:
Mexico, Azcapotzalco

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

Under the management of the Head of Global Cybersecurity Operations (GCO), the Cybersecurity Operations team are responsible for providing a coordinated suite of security focussed defence services and capabilities designed to monitor, detect, respond and mitigate information and cyber-security threats to HSBC global assets and businesses. This responsibility includes dedicated functions for the monitoring and detection of threats within the global estate as well as cybersecurity incident management and response activities. These two principal functions are supported by additional internal GCO capabilities in; Cyber Intelligence and Threat Analysis, Cybersecurity Sciences and Client Engagement and Support Services. Critical to the success of GCO is its close partnerships and collaborative working practices across all Cybersecurity teams, IT Infrastructure Delivery, and Global Business and Function clients. The overall GCO mission is placed under the purview of the Group Chief Information Security Officer (CISO).

Job Responsibility:

Leading a team of 8-20 highly skilled security professionals, providing a global service supporting the response to cyber security threats
Developing, managing and maintaining a highly skilled, efficient and effective local team across all Cybersecurity Operations service lines
Maintaining an up to date awareness and intelligence-led understanding of the current and predicted threat landscape
Owning and managing collaboration with the wider Cybersecurity (and IT) teams
Identification of processes that can be automated and orchestrated
Ensuring analysis time is efficiently focused on the more challenging and potentially higher risk problems and tasks
Managing and owning the collaboration with the wider Cybersecurity teams in the production and maintenance of efficient and effective security event monitoring and alerting use-cases and incident response playbooks
Maintaining a global view of the GCO mission
Promoting a self-critical and continuous assessment and improvement culture
Embedding a culture of individual self-improvement, development and self-directed learning
Directed engagement in support of HSBC Global Businesses and Functions
Participation in the GCO Leadership Team
Identification and development of high quality and meaningful cyber security related Management Information (MI)
Engagement within the Lines of Defence Risk Management framework

Requirements:

Excellent understanding of HSBC cyber security principles, global financial services business models, regional compliance regulations and laws
Excellent understanding and knowledge of common industry cyber security frameworks, standards and methodologies, including
OWASP, ISO2700x series, PCI DSS, GLBA, EU data security and privacy acts, FFIEC guidelines, CIS and NIST standards
Proven ability and experience of working in a high-pressure, fast paced environment where bold, time critical decision making is essential
Proven experience in identifying and responding to advanced attacker methodologies both within the corporate environment as well as external attack infrastructures, ideally with offensive experience and / or deception environment development (tripwire systems, honeypots, honey-token/accounts, etc.) using open source, vendor purchased and bespoke/in-house developed solutions
Excellent communication and interpersonal skills with the ability to produce clear and concise reports for targeted audiences across internal and external stakeholders
Solid understanding of business finance as well as effective management of budgets and expenditures
Experience in a leadership position within a cyber-security operations team to include team and capability development, staff development, career management and recruitment
Ability to orchestrate, manage and successfully implement major procedural and technological change within a complex and global organisation
Expert level knowledge and demonstrated experience of common intelligence sharing platforms / protocols and experience operating within a collective defence environment with internal stakeholders and external partners
Expert level knowledge of common enterprise technology infrastructure, platforms and tooling, including
Windows, Linux, infrastructure management and networking hardware
Expert level knowledge of intelligence analysis principles either though formal education / training or equivalent professional experience
Expert level knowledge and demonstrated experience in analysis and dissection of advanced attacker tactics, techniques and procedures in order to inform adjustments to the control plane
Expert level knowledge of scripting, programming and/or development of bespoke tooling or solutions to solve unique problems
Ability to identify, develop and track key performance indicator (KPI) metrics for accurate and contextual evaluation of operational effectiveness as well as providing recommendations for control improvement and mitigating control adjustments
Expert knowledge and technical experience of 3rd party cloud computing platforms such as AWS, Azure and Google
Industry recognised cyber security related certifications including
CEH, EnCE, SANS, CISSP, CISM, CRISC and/or CISA
Formal education and advanced degree in Information Security, Cyber security, Computer Science or similar and/or commensurate demonstrated work experience in the same
Experience in a technical authority or leadership position within an enterprise scale organisation
including hands-on experience of complex data centre environments
8+ years of experience in Cyber security operations management, Cyber security management in a leadership position

What we offer:

Greater number of leave days
Paid leave package
Culture of well-being, balance and care
Equal opportunity employer
Continuous professional development
Flexible working
Opportunities to grow within an inclusive and diverse environment

Additional Information:

Job Posted:
June 24, 2025

Expiration:
July 05, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Cybersecurity Operations Manager

HSBC

Location:Mexico, Azcapotzalco

Category:IT - Administration

Contract Type:Not provided