HSBC

1 week ago

Cyber Risk, DevSecOps / Sr. Associate Director, Cybersecurity Specialist (Pune, MH, IN, 411006)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Lead embedded 1LoD cybersecurity for Enterprise Technology engineering, ensuring security is designed in from inception and risks are managed within regulatory obligations. Own divisional AppSec and secure SDLC/DevSecOps, including threat modeling, architecture review input, and AppSec tooling practices. Govern vulnerability triage/remediation and software supply chain security (SBOM, dependency and third-party controls). Drive AI security threat modeling and translate information security risk into senior-level business and regulatory reporting.

Location: Pune

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Director level

Key Responsibilities

•Serve as the embedded 1LoD cybersecurity lead for Enterprise Technology engineering, supporting the CISO/Deputy CISO to ensure security is designed in and risks stay within appetite and regulatory obligations.
•Lead the divisional AppSec programme by embedding secure SDLC/DevSecOps, including secure coding standards, security acceptance criteria, and threat modelling; provide security input into architecture reviews.
•Govern vulnerability triage and remediation prioritisation using risk-informed approaches (e.g., CVSS/EPSS), ensuring remediation SLAs and driving findings to closure with posture reporting.
•Lead security for the internal developer platform and engineering toolchain, ensuring pipeline integrity, least privilege, and zero-trust alignment across SCM, CI/CD, build systems, registries, container platforms, secrets management, and API gateways.
•Run divisional software supply chain security and divisional AI security, maintaining relevant threat models and delivering senior-level risk reporting for business/regulatory impact.

Key Requirements

•Significant experience in information security with depth in application security, DevSecOps, platform security, and/or technical cyber consulting in a regulated environment.
•Hands-on expertise with AppSec tooling and practices, including SAST, DAST, SCA, secrets management, secure SDLC, and threat modelling.
•Experience governing software supply chain security, including SBOM adoption and dependency risk governance.
•Strong understanding of AI/ML security risks such as prompt injection, training data poisoning, model extraction, and agentic AI threats.
•Ability to translate technical risk into business and regulatory language for senior stakeholders, with strong written and spoken communication (fluent English).

Skills:CommunicationStakeholder managementCollaborationOwnershipMentoring

Languages:English

Tech Stack:DevSecOpsAppSec1LoDSecure SDLCSecure coding standardsThreat modellingCVSSEPSSPenetration testingSCMCI/CDBuild systemsRegistriesContainer platformsSecrets managementAPI gatewaysZero-trustSBOMSASTDAST

Company Brief

HSBC

Global banking and financial services organisation offering retail, commercial, corporate and investment banking, wealth management, and global markets services across Europe, Asia, the Americas and the Middle East.

Industry: Banking

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1865

Glassdoor: 3.6

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

HSBC

1 week ago

Cyber Risk, DevSecOps / Sr. Associate Director, Cybersecurity Specialist (Pune, MH, IN, 411006)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Location: Pune

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Director level

Key Responsibilities

•Serve as the embedded 1LoD cybersecurity lead for Enterprise Technology engineering, supporting the CISO/Deputy CISO to ensure security is designed in and risks stay within appetite and regulatory obligations.
•Lead the divisional AppSec programme by embedding secure SDLC/DevSecOps, including secure coding standards, security acceptance criteria, and threat modelling; provide security input into architecture reviews.
•Govern vulnerability triage and remediation prioritisation using risk-informed approaches (e.g., CVSS/EPSS), ensuring remediation SLAs and driving findings to closure with posture reporting.
•Lead security for the internal developer platform and engineering toolchain, ensuring pipeline integrity, least privilege, and zero-trust alignment across SCM, CI/CD, build systems, registries, container platforms, secrets management, and API gateways.
•Run divisional software supply chain security and divisional AI security, maintaining relevant threat models and delivering senior-level risk reporting for business/regulatory impact.

Key Requirements

•Significant experience in information security with depth in application security, DevSecOps, platform security, and/or technical cyber consulting in a regulated environment.
•Hands-on expertise with AppSec tooling and practices, including SAST, DAST, SCA, secrets management, secure SDLC, and threat modelling.
•Experience governing software supply chain security, including SBOM adoption and dependency risk governance.
•Strong understanding of AI/ML security risks such as prompt injection, training data poisoning, model extraction, and agentic AI threats.
•Ability to translate technical risk into business and regulatory language for senior stakeholders, with strong written and spoken communication (fluent English).

Skills:CommunicationStakeholder managementCollaborationOwnershipMentoring

Languages:English

Company Brief

HSBC

Industry: Banking

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1865

Glassdoor: 3.6

Website LinkedIn