**Role purpose**
**Main activities**
- Oversee designated IT/Cyber functions or capabilities within IT ensuring emerging and best practices are considered while ensuring adoption of relevant HSBC Standards, Processes, Procedures, tech control library required to mitigate business risks while enabling innovation
- Partner with Enterprise or Core IT and Business technology orgs, oversee general scale digital transformation and operations to identify, measure, mitigate, monitor and report information, technology, and cybersecurity operational risks or issues including deep dives, targeted reviews, testing of controls
- Direct guidance, oversight and challenge on key Information Technology and Cybersecurity controls and capabilities, issues, Risk and Control Assessment (RCA), relevant KRI/KCI, material internal incidents, external events,



and strategic bank transformation programs (change) to ensure risks are quantified and remediation undertaken.
**Requirements**:
- Inquisitive, critical thinker, strong analytical skills, and fast learner
- Able to partner, collaborate, and interface with various stakeholders
- Bachelor's Degree and 5+ years of experience in IT, Cyber operations, GRC, Audit, or 2LOD risk management
- Understanding of inherent and residual risk management principles, including experience with gap analysis and mitigating control and capabilities design, operation, and effectiveness assurance
- Knowledge preferred: DevOps, Cybersecurity, Hybrid Cloud, or Machine Learning.

📌 Enterprise Risk Management - Cyber (Xico)
🏢 HSBC Global Services
📍 Xico