Cybersecurity Incident Management/Incident Management Lead

Why HSBC

HSBC is one of the largest banking and financial services organisations in the world. Guided by our purpose of opening up a world of opportunity, our ambition is to become the world’s most trusted bank globally, putting customers at the heart of everything we do.

The Opportunity

Join Global Cybersecurity Operations (GCO) and play a central role in how HSBC detects and responds to information and cybersecurity threats across our global assets and estate. We are currently seeking an experienced professional to join our team in the role of Incident Management Lead .This role focuses on incident management and response across major cybersecurity incidents globally where timely containment, mitigation and remediation protect HSBC’s information assets and services. You’ll coordinate actions across multiple business units, keeping stakeholders and decision-makers informed with clear, actionable updates. Beyond response you’ll strengthen how we learn from incidents through post-incident reviews and improvements to controls, detection and response capabilities. You’ll help evolve incident response processes including automation and orchestration and contribute to the technical enhancement of security platforms. Success means faster, more consistent incident handling with clear communications and measurable improvements embedded after every major event.

What you'll be doing

• Oversee the response to major cybersecurity incidents globally, focusing on timely threat mitigation and reducing further risk to HSBC’s information assets and services
• Coordinate multiple business units during incidents, aligning actions and decision points across a complex global environment
• Provide timely, relevant updates to stakeholders and decision-makers, translating technical detail into clear actions
• Run post-incident reviews, assessing control effectiveness and detection and response performance then agreeing improvements with accountable owners
• Build close working relationships with regional Cybersecurity leads, Business Information Risk Officers and Risk Managers to support effective remediation
• Maintain awareness of technology trends and industry best practice to inform advice to HSBC businesses and Information Technology teams
• Define and maintain detailed incident response processes and procedures and contribute to technical enhancements of security platforms
• Advance incident management and response capabilities including automation and orchestration and develop colleagues across Incident Management and Response and wider GCO

What we're looking for

• Bring substantial senior incident management experience in an enterprise-scale organisation, ideally within financial services or another regulated sector including complex data-centre environments
• Communicate complex technical issues clearly and authoritatively to diverse audiences, producing actionable updates for senior stakeholders
• Apply strong incident response expertise across tools, techniques and processes for containment, mitigation and remediation
• Demonstrate knowledge of cybersecurity technologies such as intrusion detection and prevention, host-based protections, advanced anti-malware, firewalls, proxies and managed security services
• Demonstrate knowledge of network protocols including TCP, UDP, DNS, DHCP, IPsec and HTTP
• Demonstrate knowledge of enterprise infrastructure and platforms including Windows, Linux, middleware, databases, applications and networking hardware plus attacker tactics, techniques and procedures
• Work with third-party, peer, regulatory or governmental information-sharing and disclosure platforms or processes and support crisis response frameworks and communications
• Hold GIAC Security Essentials, GIAC Certified Incident Handler, CISSP or equivalent certification or bring equivalent demonstrable experience

Strengthening Global Incident Response

If you want your work to matter when it matters most this role offers real scope to influence outcomes across HSBC’s global estate. You’ll help ensure major incidents are handled with clarity pace and control from initial response through to sustained remediation. You’ll also shape how capabilities evolve through improved processes automation and platform enhancement. Apply to help protect HSBC’s customers colleagues and services through world-class cybersecurity incident management and response.

You’ll achieve more when you join HSBC.

www.hsbc.com/careers

HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

Issued by – HSBC Software Development India