HSBC

1 day ago

Associate Director, Tech SME

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Lead regional risk and control strategy for MSS Operations Technology, aligning to TRCB priorities and HSBC risk appetite. Oversee technology and cyber risks, assess control effectiveness, manage issue/action plans from raise through evidence-based closure, and coordinate audit/regulatory readiness including ICMP responses. Produce governance MI with KRIs/KPIs and residual risk views, and enable secure delivery by embedding security/control requirements into Agile/DevOps delivery and security tooling outputs.

Location: Guangzhou

Employment Type: Full time

Job Function: Executive & General Management

Seniority: Director level

Key Responsibilities

•Define and execute the regional Risk & Control strategy for MSS Operations Technology, embedding secure-by-design in delivery ways of working.
•Provide oversight of key technology and cyber risks, ensuring appropriate governance, escalation, and control execution across applications and teams.
•Own the issue/action plan lifecycle: raise, categorise, prioritise, track, challenge, and close with root cause, impact, risk statement, and evidence for closure.
•Act as the regional SME for technology controls and cybersecurity during audits and regulatory examinations, coordinating evidence collection and ICMP responses.
•Produce regional governance MI (KRIs/KPIs, control health, issue status, residual risk views) and enable secure delivery through Agile/DevOps engagement and interpretation of security/testing outputs for remediation.

Key Requirements

•Strong experience in technology risk and controls, cybersecurity risk, or technology assurance within a large financial services environment.
•Proven track record managing issues/action plans end-to-end, including evidence-based closure and effective challenge.
•Experience supporting audits and/or regulatory exams, including evidence coordination and response management.
•Working knowledge of secure SDLC and Agile/DevOps delivery practices, translating control requirements into delivery actions.
•Strong stakeholder management with excellent written and verbal communication for governance reporting and senior-level presentations.

Experience:Financial services

Skills:Stakeholder managementRisk cultureCommunicationGovernance reportingCoaching

Tech Stack:AgileDevOpsSecure SDLCNISTISO 27001COBITSASTDASTVulnerability scanningDependency scanning

Company Brief

HSBC

Global banking and financial services organisation offering retail, commercial, corporate and investment banking, wealth management, and global markets services across Europe, Asia, the Americas and the Middle East.

Industry: Banking

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1865

Glassdoor: 3.6

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

HSBC

1 day ago

Associate Director, Tech SME

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Location: Guangzhou

Employment Type: Full time

Job Function: Executive & General Management

Seniority: Director level

Key Responsibilities

•Define and execute the regional Risk & Control strategy for MSS Operations Technology, embedding secure-by-design in delivery ways of working.
•Provide oversight of key technology and cyber risks, ensuring appropriate governance, escalation, and control execution across applications and teams.
•Own the issue/action plan lifecycle: raise, categorise, prioritise, track, challenge, and close with root cause, impact, risk statement, and evidence for closure.
•Act as the regional SME for technology controls and cybersecurity during audits and regulatory examinations, coordinating evidence collection and ICMP responses.
•Produce regional governance MI (KRIs/KPIs, control health, issue status, residual risk views) and enable secure delivery through Agile/DevOps engagement and interpretation of security/testing outputs for remediation.

Key Requirements

•Strong experience in technology risk and controls, cybersecurity risk, or technology assurance within a large financial services environment.
•Proven track record managing issues/action plans end-to-end, including evidence-based closure and effective challenge.
•Experience supporting audits and/or regulatory exams, including evidence coordination and response management.
•Working knowledge of secure SDLC and Agile/DevOps delivery practices, translating control requirements into delivery actions.
•Strong stakeholder management with excellent written and verbal communication for governance reporting and senior-level presentations.

Experience:Financial services

Skills:Stakeholder managementRisk cultureCommunicationGovernance reportingCoaching

Tech Stack:AgileDevOpsSecure SDLCNISTISO 27001COBITSASTDASTVulnerability scanningDependency scanning

Company Brief

HSBC

Industry: Banking

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1865

Glassdoor: 3.6

Website LinkedIn