If you’re looking for a career where you can make a real impression, join Global Service Center (GSC) HSBC and discover how valued you’ll be. HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.
We are currently seeking an experienced professional to join our team in the role Head of Infrastructure Security
Our Technology teams work closely with HSBC’s Global Businesses and Markets to design, build and run digital services that allow millions of our customers around the world to bank quickly, simply and securely. We run and manage Technology infrastructure, datacentres and core banking systems that power the world’s leading international bank, with one of the largest technology estates in the industry.
We are looking for a Cybersecurity leader to join us to shape our long-term strategy, and turbo-charge delivery, as the accountable owner for Infrastructure Security across the bank. This role covers the secure configuration of and consulting for operating systems (Unix/Lunix, Windows, zSeries, etc), databases (Oracle, MongoDB, DB2, etc), certain cloud assets (e.g. containers), middleware (WebSphere, MQ etc) and end-user devices (ATMs, VDI, mobile etc). This senior role reports directly into the Global Head of Cyber Technology Engineering.
Main Activities:
Strategy: Define and maintain our global strategy for Infrastructure Security, supported by engineers, platform owners, architects and multiple Control Owners, enabling business success, meeting regulatory expectation and best practise, whilst responding to current and likely threat actor evolution. Includes: security standards as code; continuous platform security assessments, and; risk-based capability expansion.Delivery: Own the investment roadmap for Infrastructure Security and its successful delivery across multiple partners. Enable multiple cyber mandates to be enforced by default. Ensure the transparent prioritisation of a common backlog to drive risk reduction, simplification and wider strategic needs. Influence and steer delivery within partner teams across Technology.Innovation: Empower HSBC to successfully navigate cyber risk with innovative, responsive and frictionless technologies and services, both those delivered in-house and from external partners. Foster and empower a culture of innovation, experimentation, and continuous improvement.Partnership: Form close partnerships with engineering teams: as design partners – for how capabilities will be implemented and operated, at times in novel ways; as customers – understanding their needs as they consume secure baselines or operationalise new platforms, and as delivery partners – prioritising change within Cybersecurity Engineering teams, and to drive bank-wide adoption of uplifts.Services: define, operate and mature secure baseline maintenance and security consulting to platform and infrastructure owners across the bank. Support / implement security changes on certain core platforms.Oversight: Ensure infrastructure security is overseen end-to-end, robustly and throughout the organisation: from platform acquisition, service deployment through to federated operation. Drive a data-centric approach to observability and assessment, wherever possible supported by automation, measures and analytics.Accountability: Ensure regulatory and risk management outcomes are being maintained or robustly managed. Ownership of High-Risk Audit, Regulator and self-identified issues. Ownership of the capability budget, balancing run and change investment. As a senior leader, contribute to and champion change across both Cybersecurity and Technology, occasionally outside of your primary remit.Talent: Lead, manage, invest in, recruit and inspire a team of highly skilled and performant SMEs across the globe. A culture driven by empowerment, experimentation, learning, partnership and delivery. A place where colleagues thrive, solving meaningful problems that keep the bank and its customers safe.