Sr. Associate Director, Technology Management

Some careers have more impact than others.

If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be.

We are currently seeking an experienced professional to join our team in the role of Sr. Associate Director, Technology Management.

Business: GPS Technology 

Job ID：41516

Principal responsibilities

1. Consolidation & Operating Model

• Conduct a comprehensive review of all Control Centre-related activity currently taking place across Client Connectivity
• Identify all personnel performing risk, resilience, cyber, and release management functions, regardless of their current reporting line
• Design and implement a unified Control Centre operating model, eliminating duplication and establishing clear ownership
• Build a cohesive team culture with shared goals, aligned processes, and a consistent approach to risk and control
• Act as the single point of escalation for all Control Centre matters across the department

2. Risk & Control

• Own and maintain the department's risk and control framework, ensuring it is current, comprehensive, and fit for purpose
• Drive a proactive risk culture, ensuring issues are identified, logged, assessed, and remediated in a timely manner
• Lead engagement with internal audit, compliance, and regulatory stakeholders on behalf of Client Connectivity
• Produce risk reporting for senior management and governance forums
• Ensure all operational processes have appropriate controls in place and are regularly reviewed

3. Operational Resilience

• Own the department's operational resilience strategy, ensuring critical services are identified and protected
• Define and maintain impact tolerances in line with regulatory expectations
• Oversee business continuity planning, disaster recovery testing, and incident management processes
• Ensure the department is prepared for, and can respond effectively to, disruptive events
• Lead post-incident reviews and drive lessons-learned activity across the team

4. Cyber, Fraud & Surveillance

• Serve as the department's lead for cyber risk management, working closely with Group Information Security
• Ensure appropriate controls are in place to detect, prevent, and respond to cyber threats and fraudulent activity
• Oversee surveillance controls relevant to Client Connectivity, ensuring compliance with applicable policies and regulations
• Champion a security-first mindset across the department
• Represent Client Connectivity in firm-wide cyber and fraud governance forums

5. Release Management

• Establish and maintain clear, real-time visibility of all changes taking place across the Client Connectivity estate, ensuring nothing goes untracked or ungoverned
• Own the risk assessment framework for changes, ensuring every release is evaluated consistently and that risk is understood and accepted before deployment to production
• Work with delivery teams to drive up release cadence by encouraging smaller, safer, low-risk, non-breaking changes — moving away from large, infrequent releases towards a more controlled and continuous flow of change
• Champion engineering practices that make frequent releases achievable — including feature flags, backward-compatible changes, and robust automated testing — in partnership with engineering leads
• Track and report on release quality metrics, including change-related incidents, rollback rates, and post-implementation review outcomes
• Act as the escalation point for release-related risk decisions, providing clear guidance to teams on when changes are ready to proceed and when they are not

6. Engineering Lens & AI-Driven Efficiency

• Apply an engineering mindset across all four Control Centre disciplines, challenging manual and repetitive processes and seeking opportunities to automate, streamline, and simplify
• Identify and prioritise use cases where AI and machine learning tooling can meaningfully reduce effort, improve accuracy, or enhance the speed of decision-making within risk, resilience, cyber, and release management
• Work with engineering and data teams to prototype, test, and embed AI-driven tooling into Control Centre workflows
• Establish a continuous improvement culture within the team, where efficiency opportunities are regularly surfaced and acted upon
• Ensure that automation and AI adoption is done responsibly — with appropriate controls, auditability, and governance in place
• Track and report on efficiency gains delivered through engineering and AI initiatives, demonstrating measurable impact over time

Knowledge & Experience / Qualifications

1.Essential

• Empathy with the software engineering discipline.
• Significant experience in a senior technology risk, control, or operational resilience role within financial services
• Strong understanding of risk and control frameworks, with proven experience designing and implementing them at scale
• Demonstrable experience across two or more of: cyber/fraud, release management, or operational resilience
• Appetite and ability to apply an engineering lens to operational problems — comfortable working with engineers and data teams to identify and deliver automation and AI-driven improvements
• Track record of leading and motivating cross-functional teams, ideally within a large, matrixed organisation
• Excellent stakeholder management skills, with the ability to engage credibly at senior and executive level
• Strong analytical and problem-solving skills, with the ability to make decisions in ambiguous or complex environments
• Experience managing regulatory relationships and preparing material for governance forums

2.Desirable

• Experience in investment banking or financial markets technology
• Familiarity with HSBC's risk and control framework, operational resilience standards, or technology governance processes
• Knowledge of relevant regulatory requirements (e.g. DORA, PRA operational resilience policy, FCA expectations)
• Industry certifications such as CISM, CRISC, ITIL, or equivalent

3.Leadership & Behaviours

• Collaborative — builds strong relationships across the department and broader organisation to drive shared outcomes
• Decisive — comfortable making sound judgements with imperfect information and taking accountability for decisions
• Inclusive — creates an environment where all team members can contribute, develop, and thrive
• Forward-thinking — anticipates risks and opportunities before they materialise, rather than simply reacting to events
• Clear communicator — able to translate complex risk and technical concepts into clear, actionable language for all audiences

/51/LP/WX

About HSBC Technology China

We develop, implement and support software and IT services and processes that allow HSBC to remain at the forefront of high-quality banking systems.

You’ll achieve more when you join HSBC.

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.”  

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.  

Candidate with less relevant experience or skills may be offered a lower Global Career Band than stated above. 

Due to the urgent hiring need, candidates with immediate right to work locally and no relocation need will be prioritised. 

***Issued By HSBC Software Development (GuangDong) Limited***