Risk and Control Centre /Sr. Associate Director, Technology Management

In this role you will:

• Consolidate Control Centre-related activity across Client Connectivity into a single operating model, removing duplication and establishing clear ownership and escalation.
• Own and maintain the department’s risk and control framework, driving proactive identification, logging, assessment, and remediation of issues.
• Lead operational resilience activities, including identification of critical services, impact tolerances, business continuity planning, disaster recovery testing, incident management, and post-incident reviews.
• Act as the department lead for cyber risk management, fraud controls, and surveillance, partnering with Group Information Security and representing the area in relevant governance forums.
• Establish end-to-end release management visibility and governance, including consistent change risk assessment, release quality metrics, and escalation for release risk decisions.
• Apply an engineering lens to control disciplines, identifying and delivering automation and responsible Artificial Intelligence (AI) / machine learning opportunities with appropriate governance and auditability.
• Produce clear reporting for senior management, governance forums, and engagement with internal audit, compliance, and regulatory stakeholders.
• Build an inclusive, high-performing team culture with shared standards, processes, and continuous improvement.

To be successful in this role you should meet the following requirements

• Strong empathy with the software engineering discipline and ability to partner effectively with engineering and data teams.
• Significant senior experience in technology risk, controls, or operational resilience within financial services.
• Proven ability to design, implement, and run risk and control frameworks at scale.
• Demonstrable experience across at least two of the following: cyber security / fraud, release management, operational resilience.
• Strong stakeholder management skills, with credibility engaging senior and executive leaders and working in a matrixed organisation.
• Strong analytical judgement and decision-making capability in complex or ambiguous environments.
• Experience engaging with internal audit, compliance, and regulatory stakeholders and preparing governance materials.
• (Desirable) Experience in investment banking or financial markets technology; familiarity with HSBC risk/control and technology governance; knowledge of relevant regulations (e.g., Digital Operational Resilience Act (DORA), Prudential Regulation Authority (PRA) operational resilience policy, Financial Conduct Authority (FCA) expectations); certifications such as CISM, CRISC, ITIL (or equivalent).