(Cybersecurity) Cybersecurity Senior Security Researcher

Technologies we use

Your responsibilities

• Deliver security research projects focused on HSBC critical services and projects to ensure that design, quality and implementation of controls do not expose the bank to a significant level of risk.

• Achieve excellence by driving performance, compliance and security.

• Identifying previously unknown vulnerabilities and new attack techniques.

• Develop tools and automation of processes to enhance security assessment.

• Work with key stakeholders to proactively drive the reduction in Cybersecurity risks and to improve the security risk posture of HSBC within the business risk appetite.

• Provide subject matter expertise and guidance to a broad range of stakeholders across global business and functions.

• Engage with relevant programmes that are critical to the bank.

• Understand the financial services industry security and threat landscape.

• Engage with a diverse set of stakeholders in order to achieve CROS objectives, including Business and Functions, Cybersecurity leads, Head of Cybersecurity functions and Control Owners.

• Engage with specialist technology functions such as, Cybersecurity Technology, Cybersecurity Operations and Security Architecture.

• Maintains HSBC internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators.

• The jobholder will also adhere to and be able to demonstrate adherence to internal controls. This will be achieved by adherence to all relevant procedures, keeping appropriate records and, where appropriate, by driving the timely implementation of internal and external audit points, including issues raised by external regulators, and internally identified Cybersecurity risks.

• The jobholder will implement the group compliance policy by containing compliance risk in liaison with Global Head of Compliance, Global Compliance Officer, Area Compliance Officer or Local Compliance Officer. The term ‘compliance’ embraces all relevant financial services laws, rules and codes with which the business has to comply.

• This will be achieved by adhering to all relevant processes/procedures and by liaising with compliance department about new business initiatives at the earliest opportunity. Also and when applicable, by ensuring adequate resources.

• The jobholder will ensure the fair treatment (service excellence) of our customers is at the heart of everything we do, both personally and as an organisation.

• The jobholder will also continually reassess the Cybersecurity and operational risks associated with the role and inherent in the business, taking account of changing economic or market conditions, legal and regulatory requirements, operating procedures and practices, management restructurings, and the impact of new technology.

• This will be achieved by ensuring all actions take account of the likelihood of operational risk occurring. Also by addressing any areas of concern in conjunction with entity management and/or the appropriate department.

Our requirements

What we offer