Cybersecurity Specialist

• Green field opportunity, working with our transformation programme to define and shape a developing approach for Cyber risk consultancy integrating into the end to end procurement process from supplier selection to completed onboarding and issue remediation
• acting as a pioneer to prove the developing approach you will engage with other Cyber teams, Third Party Management, and other risk teams to deliver Cyber risk support and assessment of a selection of critical supplier engagements, with an initial focus in the UK
• develop as an SME and help to inform wider embedding and training on the consultancy approach to peer TPSA analysts to build and develop the team
• support Control Officers, Risk Stewards, Internal and External Audit, and Regulators with any relevant reviews, examinations and information requests
• contribute to, be an ambassador for, and to drive delivery of the cybersecurity strategy
• engage with senior stakeholders including Technology and Cybersecurity leadership in regions
• stakeholders across all lines of defence: Chief Controls Office Technology, 2LoD Resilience Risk and 3LoD Internal Audit teams
• support regulatory examinations

• An inquisitive approach, always asking how to achieve goals in a smarter and more effective way
• resilient and self driven, capable of informing and driving change
• positive and professional attitude, team player, flexible and adaptable
• knowledge and exposure of Risk and Control Management frameworks and control design and execution, in theory and practice
• ability to understand and articulating defects, threats and technical gaps to both technical and business stakeholders
• bachelor Degree and/or similar experience, preferably in IT security in the Financial Services industry or global corporate service provider
• have one or more industry-recognised cybersecurity-related certifications including CISA, CISM, CISSP, CRISC and CCSP etc.
• a demonstrable technical understanding in Cloud Security (particularly for SaaS) is desired
• experience in third party / supply chain governance
• experience of working in international and diverse environments
• experience in engaging with third parties, business, regional and regulator stakeholders
• ability to communicate to and influence executive leadership – effectively translating technical gaps into business risk
• ability to prepare concise updates, reports and presentations for senior management
• ability to manage multiple projects and priorities concurrently
• possess strong leadership and influencing skills to drive and embed change
• experience within fast-moving, complex and demanding corporate environments able to provide trusted advice and guidance with authority to peers and senior stakeholders
• influential, credible and persuasive, active listener, embraces HSBC Values, shows good judgement and demonstrates high level of communication skills in order to achieve effective

relevant cybersecurity certifications or knowledge

• flexible working
• continuous professional development
• opportunities to grow within an inclusive and diverse environment