HSBC Looking for SVP Information Technology Security at Mumbai, Maharashtra Full Time

The health and safety of our employees and candidates is very important to us. Due to the current situation related to the Novel Coronavirus (COVID-19), we’re leveraging our digital capabilities to ensure we can continue to recruit top talent at HSBC. As your application progresses, you may be asked to use one of our digital tools to help you through your recruitment journey. If so, one of our Resourcing colleagues will explain how our video-interviewing technology will be used throughout the recruitment process and will be on hand to answer any questions you might have.

Some careers open more doors than others.

If you’re looking for a career that will unlock new opportunities, join HSBC and experience the possibilities. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

If you’re looking to unlock new job opportunities, take a look at the possibilities right on your doorstep here at HSBC.

Role Summary

The role is responsible for operating as part of a global/regional team within Cybersecurity to define and implement an industry-leading Cybersecurity Service that supersedes our constantly changing information security threats. The role holder is expected to build and establish trust with Country/Regional senior stakeholders whilst assisting with regional initiatives.

This role is also required to manage the IT risk function of the bank.

Role Description

This role will carry out some or all of the following activities:

Collaborate with the Global, Regional and Country representatives of Technology, plus other peer managers to implement the team’s goals within entity policy, expense and regulatory constraints

Lead and support peers in Developing, implementing and monitoring a strategic, comprehensive enterprise cyber security management program

Assist Group/Region with the overall business technology planning, providing a current knowledge and future vision of technology and systems.

Contribute to the Sub-function/Region Cybersecurity strategy to secure the bank’s technology from the inside out, whilst maintaining, protecting and enhancing HSBC’s values, reputation and stakeholder value

Provide/organize Cybersecurity related training sessions to improve awareness level of staff members, setting performance targets of direct reports and contributes to employees’ professional development

Assist with business stakeholders across the company to raise awareness of risk management concerns and educate country management about country cybersecurity risk level and actions required to mitigate/control existing risks.

Carefully considers the security requirements of an organization as well as the business requirements in order to address any security risks as well as satisfy the organization’s business goals.

Support business for in-country-specific initiatives via cybersecurity delivery, consultancy and country augmentation teams when required.

Keeping abreast of developing security threats, and helping the country board understand potential security problems that might arise from acquisitions or other big business moves.

Brief country management about ongoing Cybersecurity improvement projects benefits, status and challenges which require their attention and/or involvement to make it success.

Provide guidance and ensure country regulatory requirements related to Cybersecurity are addressed in a timely fashion to implement relevant controls and to develop/amend policies/standards to comply with the requirements.

Provide assistance in Governance related matters, ensuring consistency with Global/Regional key messaging and exercising formal governance through appropriate governance forums.

Key Responsibilities

Local Regulatory Engagement Stakeholder Engagement

Establish and maintain stakeholders’ relationships and act as local cybersecurity SME for general cybersecurity queries and requests

Understand, assess & advise HSBC technology controls and regulatory requirements to ensure compliant status and follow up if any gaps and remediation.

Provide input and support to global / regional regulatory governance and control map reporting related to country and countries cyber security control dashboard

Regulatory submissions (ad-hoc / periodic) to be done as per the required frequency

Awareness and Training

Coordinate with global / regional / country team to deliver and promote cyber security awareness programs and education campaign to all employees and/or special group of people (such as high risk users, senior management team, IT developers)

Periodic staff communication on cyber awareness to promote cyber education and awareness

Cyber Execution and Strategy in-Country

Contribute to the Sub-function/Region Cybersecurity strategy to secure the bank’s technology from the inside out, whilst maintaining, protecting and enhancing HSBC’s values, reputation and stakeholder value.

Assist with regional/global cyber initiatives that qualifies as outsourcing as per the country framework.

Governance & Oversight

Provide consultancy and oversee the country Critical Assets, Testing/GASRA/Open issue status and pursue further with the ITSO or escalate to CIOs if required.

Coordinate with global control owners to understand and assess the impact of global controls / issues to country and accordingly advise country businesses.

Participate in the country risk governance forums and provide update on cyber risk and control to stakeholders.

Provide cyber support to regulatory and internal group audits .

Technology controls risk and control assessment for the country, impact analysis from country perspective

Requirements

Degree in business administration or a technology-related field required.

Professional security management certification (e.g. CISSP,CISM,CISA,CRISC etc)

Knowledge of common information security management frameworks and best practices (e.g. ISO/IEC 27001, GASSP, NIST etc)

Minimum of 7-12 years of experience in a combination of risk management, cyber security and IT jobs

Excellent written and verbal communication skills and the ability to influence senior executives

Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams

Proficiency in multiple technical disciplines and applicable security/risk concepts and methodologies

Previous experience in developing and implementing information security strategies and projects

Experience in Agile principles adoption or other best in class development practices

Additional Information

Mandatory to successfully complete Anti-Money Laundering and Sanctions training and post-course assessment, as required.

As per the RBI mandated Capacity Building Certification Requirement for Bank, this role requires the candidate to have the required certification / equivalent qualification before the selection for the above role. Refer to RBI Mandated Capacity Building Policy on HR Direct.

Useful Link

Link to Careers Site: Click HERE

You’ll achieve more when you join HSBC.

HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment.

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

Issued by The Hongkong and Shanghai Banking Corporation Limited, India