Job Description
Join a digital first bank that’s powered by people.
Our technology team builds innovative digital solutions rapidly and at scale to deliver the next generation of banking services for our customers around the world.
You’ll be helping us be digital-first when developing new products and services, as well as enhancing existing ones by providing software development and support to each of our Global Businesses and Global Functions.
Using best-in-class technologies, you'll deliver end-to-end execution of all technology services consumed across the HSBC landscape, including change programmes and applications in production.
Some careers shine brighter than others.
If you’re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.
The role is a Senior Technology Risk and Control Cloud Specialist, and provides support to Chief Technology office Cloud Services team. The role holder will be primarily responsible for protecting the organisation through appropriate Technology risk management.
The purpose of the function is to enable our colleagues within the Chief Technology Office (CTO) Cloud Services team to deliver a safe and secure service to all our customers, colleagues, and the Bank itself.
This role provides expertise in relation to Technology’s management of its control environment within the context of the Operational Risk Management Framework (ORMF).
Principal Accountabilities
· Develop and maintain relationships with key stakeholders to promote a unified approach to technology risk management across the organization.
· Lead high-level risk assessments related to the use of Cloud Services (e.g. AWS, GCP, Azure and Ali Cloud) to identify and evaluate potential risks, providing insights to senior leadership for informed decision-making.
· Collaborate closely with senior management to integrate risk considerations into strategic technology planning and decision-making processes.
· Establish and monitor key control indicators (KCIs) to track the effectiveness of risk mitigation efforts and report to senior management.
· Oversee and enhance technology control frameworks, ensuring they are effective, adaptable, and compliant with industry regulations and standards.
· Mentor, guide and lead a team of technology risk professionals, fostering a culture of excellence, collaboration, and continuous improvement.
· Coordinate and manage complex internal and external technology audits, ensuring efficient communication and resolution of audit findings.
· Stay abreast of emerging technologies, cybersecurity threats, and regulatory changes to anticipate and address potential risks.