Cyber Lead - Group Functions Technology (Sheffield, GB, S1 4NB)

HSBC
Sheffield
Workplace: OnsiteFull timeFunction: CybersecuritySkills: ["Communication","Stakeholder management","Governance","Risk-based decision-making","Collaboration"]

Lead cyber risk and control governance for Group Functions Technology, partnering with technology leadership supporting Risk, Finance, Treasury, and corporate functions. Own and drive the cyber risk profile (risk register, prioritisation, remediation), coordinate assurance readiness and evidence management, and embed security-by-design into change and operations. Oversee supplier/SaaS cyber risk, improve in-service security posture, support incident leadership, and deliver decision-grade reporting to senior governance forums.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
HSBC
HSBC
4 days ago

Cyber Lead - Group Functions Technology (Sheffield, GB, S1 4NB)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 16 hours agoStatus: Live

Job Summary

Lead cyber risk and control governance for Group Functions Technology, partnering with technology leadership supporting Risk, Finance, Treasury, and corporate functions. Own and drive the cyber risk profile (risk register, prioritisation, remediation), coordinate assurance readiness and evidence management, and embed security-by-design into change and operations. Oversee supplier/SaaS cyber risk, improve in-service security posture, support incident leadership, and deliver decision-grade reporting to senior governance forums.
Location: Sheffield
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Act as the senior cybersecurity partner for GFT domains, advising leadership and delivery teams on material cyber risks, control expectations, and risk-based trade-offs.
  • •Own and drive the cyber risk profile, maintaining the risk register, articulating risks (cause–event–impact), prioritising them, and managing timebound remediation plans.
  • •Lead control governance and assurance readiness by coordinating control assessments, thematic reviews, and audit activity, ensuring evidence quality and sustainable improvements.
  • •Embed proportionate security-by-design across change delivery by providing risk-based input to solution designs, delivery plans, and acceptance criteria.
  • •Oversee supplier and SaaS cyber risk, supporting onboarding/renewals and driving mitigations for access, data protection, logging/monitoring, incident obligations, resilience, and exit/lock-in risks.

Pay and Benefits

Perks:Health InsurancePensionParental Leave

Key Requirements

  • •Significant cybersecurity experience in a regulated organisation, with credibility to advise senior technology and business stakeholders.
  • •Strong cyber risk, governance, and controls capability across risk identification, issue management, control mapping, remediation planning/tracking, and audit/assurance engagement.
  • •Solid technical foundation across enterprise security domains (e.g., identity and access, threat/exposure & vulnerability management, logging/monitoring, data protection, cloud/SaaS and third-party risk, application security).
  • •Ability to translate technical findings into business impact and clear decision options.
  • •Strong written and spoken communication in fluent English, including confident facilitation/chairing of governance forums and constructive challenge.
Experience:Financial servicesRegulated environmentCybersecurityCloud/SaaS
Skills:CommunicationStakeholder managementGovernanceRisk-based decision-makingCollaboration
Certifications:ISO27001CISACISMCISSPCRISCCEH
Languages:English
Tech Stack:ISO27001CISACISMCISSPCRISCCEHCloudSaaSThird-party riskApplication securityIdentity and accessThreatExposure & vulnerability managementLogging/monitoringData protectionOperational resilienceAI

Company Brief

HSBC
Global banking and financial services organisation offering retail, commercial, corporate and investment banking, wealth management, and global markets services across Europe, Asia, the Americas and the Middle East.
Industry: Banking
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1865
Glassdoor
Glassdoor: 3.6
WebsiteLinkedIn