Associate IT Security Manager

Some careers have more impact than others.

If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be.

We are currently seeking an experienced professional to join our team in the role of Associate IT Security Manager.

Business:Asia & Middle East Technology

Job ID: 59322

Principal responsibilities

• Ensure the businesses are compliant to multiple regulatory obligations, namely, HKMA C-RAF, Critical Infrastructures (Computer Systems) Ordinance and HK IA GL20, by conducting detailed assessments with external assessors and global SMEs, while maintaining proper, timely and cross-entity communications with various stakeholders.
• Act as the liaison between Cyber Security team and all Business/Functions in the group, to which provide expertise, consultancy, and support as the Subject Matter Expert of Cyber Security to identify risk and controls required on cyber security
• Lead projects to produce deliverable with high quality/standards under strict timelines .
• Solicit with senior business stakeholders and 2nd line of defence for input and steer for all regulatory inquiries and circulars.
• Uplift the assessment process with automation and optimization.
• Monitor outstanding issues, track regulatory commitments and be responsible for remediation closure with support from Global SMEs and local leadership.
• Keep abreast of the latest cyber security threat landscape, evaluate the potential impact to the bank.
• Communicate with regulators when needed and manage their expectations.

Requirements

• Bachelor’s degree in computer science or a related discipline.
• Proven experience in IT security and risk management; candidates with less experience may be considered for an Associate role.
• Solid experience in cybersecurity controls, and IT risk management frameworks.
• Strong knowledge of banking and insurance regulations and guidelines related to cybersecurity and technology risk management, including Fintech.
• Strong self-motivation, with good leadership, communication, interpersonal and analytical skills.
• Great sense of ownership and a customer-centric mindset.
• Excellent command of both spoken and written English and Chinese; Cantonese is an advantage.
• Professional qualifications such as CISM, CISA, CISSP and CEH are preferred.
• Experienced in performing security risk assessment and audits based on industry standards.
• Familiar with ISO 27001 Information Security Management Systems (ISMS).
• Experience with project management.

/WX/51

You’ll achieve more when you join HSBC.

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

***Issued By HSBC Software Development (GuangDong) Limited***