**Big Bank Funding.
FinTech Thinking.
**
Our Technology teams work closely with HSBC's global businesses to help design and build digital services that allow our millions of customers around the world; to bank quickly, simply and securely.
We also run and manage our IT infrastructure, data centres and core banking systems that power the world's leading international bank.
Our multi-disciplined Technology teams include amongst others: DevSecOps engineers, technology operational teams, IT architects, front and back-end developers, infrastructure/cloud specialists, cybersecurity experts, Control Owners, and delivery teams (inc. project and programme managers).
Following extensive investment across our Technology and Digital domains and with plans for continued expansion throughout **** and beyond, we are currently seeking a Lead for Secure Development, to join the HSBC Cybersecurity team within the Global Technology team
**Head of Threat and Controls Assessment Americas**
**Role Purpose**:
This role reports into the Global Head of Cyber Threat and Controls Assessment, closely collaborating with peers across Penetration Testing; Secure Development, Third Party Security Assessment, Vulnerability Management and Cybersecurity business and regional leads, enabling effective end-to-end vulnerability identification.
**Main Activities**:
- Drive outcomes and best practices in the Americas region (Canada, USA, Mexico, Brazil and Chile); acting as the senior point of contact for any Cybersecurity related issues.
- Represent Cybersecurity at regional senior management meetings, where you will be expected to articulate approaches/strategies and respond to challenges.
- Lead and support a team of Cybersecurity professionals, providing clear direction, set performance targets and contribute to employees' professional development.




- Support, drive and continuously evolve the threat and controls assessment capabilities.
This includes support/driving the development of self-service threat modelling supported by automation, and data-led thematic assessment of IT services and controls.
- Collaborate with the Integral, Regional and Country representatives of Technology and other peer managers to implement the team's goals within entity policy, expense and regulatory constraints.
- Lead and support peers within the Cybersecurity function to define and implement an industry leading Cybersecurity Service that supersedes our constantly changing information security threats.
- Contribute to the Sub-function/ Region Cybersecurity strategy to secure the bank's technology from the inside out, whilst maintaining, protecting and enhancing HSBC's values, reputation and stakeholder value.
- Responsible for ensuring effective engagement with Global Business/ Function/ Regions.
- Define, plan and lead change activities for driving capability uplift and process improvements.
- Work with the other regions to ensure a consistent approach to Threat and Controls Assessment.
Stay up to date on new industry trends and best practices
**Qualifications Required**:
**What you will bring to the role;**
To be successful in this role you should have proven experience within the Technology sector with knowledge of the following skills:
**Mindset**




- An inquisitive approach, always asking how to achieve goals in a smarter and more effective way.
- An ability and interest to learn and experiment with new approaches, in different contexts, across the amazing scale that HSBC brings.
- Be a change-agent.
**Good Risk and Controls understanding**
- Knowledge and exposure of Risk and Control Management
- Ability to understand and assess both threats, controls and vulnerabilities, articulating these to both technical and business stakeholders.
**Strong Technical background**
- Proven experience working in a large scale, multi-national and technologically diverse environment.
- Hands on experience with threat modelling and strong technical understanding and experience of assessing vulnerabilities and identifying weaknesses in diverse enterprise IT assets.
- Strong understanding of Software Development Life Cycle (SDLC) with a focus on security.
- Professional IT Security qualifications and/or certification.
- Knowledge of Governance, Risk & Compliance.
- Experience in continuous improvement and process optimisation.
- Excellent analytical skills, organizational skills, ingenuity and the ability to work as part of a team.
- Have a minimum of 10 years in a Cybersecurity role.
- Have a minimum of 3 years leadership (projects, resource etc.).
- Experience/ udnerstanding of secure development, vulnerability management and third party security assessment would be beneficial.
**Strong stakeholder management and communications skills**
- Experience of working in international and diverse environments.
- Experience in managing high-performing individuals in different geographies, often remotely.
- Experience in engaging with business, technology, regional and regulat

📌 Head Of Cyber Threat And Controls Assessment Latin America (Xico)
🏢 HSBC Global Services
📍 Xico