Must have

• English (C1)

Requirements description

What you need to have to succeed in this role

• Minimum 3 years of hands-on experience in one or more control domains (e.g., Patch Management, Backup & Recovery).
• At least 3 years of experience in operational, non-financial, or technology risk management.
• Background in IT, Risk, Audit, or Operations with exposure to diverse risk types.
• Proven ability to identify and solve complex problems with business impact.
• Track record of delivering process improvements and meeting commitments.
• Experience in financial services or other regulated industries preferred.
• Strong communication skills to influence and challenge stakeholders effectively.
• Ability to work independently and present complex issues in simple terms.

Offer description

Some careers shine brighter than others.

If you’re looking for a career that will help you stand out, join HSBC, and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

Your career opportunity

The GCIO Chief Control Office (CCO) team plays an important role in enabling the bank to operate within its risk appetite by ensuring efficient and effective risk and control management. We do this by providing operational risk and control expertise, specialist technical knowledge and a deep understanding of the businesses and functions we serve.

Key activities include implementation and oversight of the Group’s Risk Management Framework, ongoing and targeted controls assessments, implementing and maintaining robust risk governance, and championing a proactive risk culture. GCIO CCO works closely with partners across all lines of defence and is responsible for maintaining positive relationships with our regulators and external partners.

Your responsibilities

1. Lead risk and control oversight for CTO Infrastructure services, including Patch Management, Data Backup & Recovery, and Secure Data Destruction.
2. Act as a trusted advisor to senior management on operational risk matters, including assessments and issue management.
3. Promote data-driven, accountable decision-making in risk and control practices.
4. Provide expert insights to improve control environments and monitor risk behaviors.
5. Design practical and effective processes and controls aligned with business needs.
6. Identify emerging trends to anticipate changes in the risk landscape.

show all (8)