Cyber Lead - DevSecOps (CTO) (Sheffield, GB, S1 4NB)

HSBC
Sheffield
Workplace: OnsiteFull timeFunction: CybersecuritySkills: ["Communication","Stakeholder management","Risk management","Written communication"]

Lead cybersecurity for Enterprise Technology teams as a technical authority and security partner, combining application security, developer platform security, and AI security controls. Ensure security-by-design across SDLC and DevSecOps (including SAST/DAST/SCA, secrets management), govern security risk reporting to the CISO organization, and oversee software supply chain and AI security programs. Drive vulnerability triage, penetration testing remediation, and risk register governance.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
HSBC
HSBC
2 days ago

Cyber Lead - DevSecOps (CTO) (Sheffield, GB, S1 4NB)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live

Job Summary

Lead cybersecurity for Enterprise Technology teams as a technical authority and security partner, combining application security, developer platform security, and AI security controls. Ensure security-by-design across SDLC and DevSecOps (including SAST/DAST/SCA, secrets management), govern security risk reporting to the CISO organization, and oversee software supply chain and AI security programs. Drive vulnerability triage, penetration testing remediation, and risk register governance.
Location: Sheffield
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Director level

Key Responsibilities

  • •Act as the cybersecurity SME for the assigned technology organisation, providing technical advisory across programmes, projects, incidents, and IT outages.
  • •Embed security-by-design across SDLC and DevSecOps, including SAST, DAST, SCA, and secrets management in CI/CD.
  • •Own and govern divisional application security, application vulnerability triage and prioritisation, and penetration testing remediation with CISO-level reporting.
  • •Oversee security governance for the internal developer platform and toolchain, including source control, build systems, package registries, container platforms, secrets management, and internal API gateways.
  • •Establish software supply chain security and divisional AI security functions, including SBOM generation, dependency risk governance, and AI threat models and risk register reporting.

Pay and Benefits

Perks:Health InsurancePensionPaid Leave

Key Requirements

  • •Significant information security experience with depth in application security, DevSecOps platform security, and/or technical cyber consulting in a regulated environment.
  • •Hands-on AppSec tooling and practices, including SAST, DAST, SCA, secrets management, secure SDLC, and threat modelling.
  • •Working knowledge of software supply chain security, including SBOM generation and dependency risk governance.
  • •Strong understanding of AI and ML security risks, including prompt injection, training data integrity, model extraction, and agentic AI threats.
  • •Ability to communicate technical risk clearly to senior stakeholders and manage security governance expectations including risk register management and reporting.
Skills:CommunicationStakeholder managementRisk managementWritten communication
Languages:English
Tech Stack:SDLCDevSecOpsSASTDASTSCASecrets managementCI/CDCVSSEPSSSBOMAPI gatewaysSource controlContainer platformsPackage registriesThreat modellingPenetration testingAI threat modelsAI governanceRisk register

Company Brief

HSBC
Global banking and financial services organisation offering retail, commercial, corporate and investment banking, wealth management, and global markets services across Europe, Asia, the Americas and the Middle East.
Industry: Banking
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1865
Glassdoor
Glassdoor: 3.6
WebsiteLinkedIn