CTO Head of Risk And Controls

HSBC Holdings plc; Sheffield; On-site; GBP 150,000 - 210,000; Full time

Benefits offered by this job

Disability Confident Leader

Job summary

HSBC Holdings plc in the United Kingdom seeks a Senior Director to lead the CTOi Control Operations, owning the control environment across CTO Infrastructure and driving proactive risk management at scale.

You will partner with senior stakeholders across technology and the business to strengthen the technology risk and control framework, oversee an organization of 170 people, and manage a USD 15m budget. This role shapes policy for disaster recovery, incident response, and risk reporting.

Qualifications

• Experience building technology risk and control frameworks in regulated environments.
• Policy development for disaster recovery, incident response, and security awareness.
• Ability to identify and assess risks across information security, infrastructure, apps, and vendors.
• Proven delivery of risk mitigation with measurable outcomes.
• Experience reporting to senior governance forums and closing gaps.
• Collaborative partner with technology and business leadership at executive level.
• Experience coordinating with second-line risk, compliance and internal audit.
• Proven track record budgeting and resourcing risk and control initiatives.

Responsibilities

• Own controls across CTOi and drive data-based controls management and transformation.
• Represent CTOi at risk and control forums including the Technology RCMM chaired by the GCIO.
• Develop and maintain the technology risk and control framework aligned to risk strategy and regulatory requirements.
• Establish policies across disaster recovery, incident response and security awareness training.
• Identify and assess risks across information security, infrastructure, applications and vendor management.
• Implement risk mitigation strategies in partnership with technology teams and stakeholders.
• Monitor and report control effectiveness and close deficiencies.
• Coordinate with operational risk, compliance and internal audit to manage risks consistently.

Skills

Technology risk management

Controls governance

Disaster recovery

Incident response

Security awareness training

Vendor management

Executive stakeholder engagement

Budget management

Job description

Ready to shape how CTOi manages technology controls and risk?

Why HSBC

HSBC is one of the largest banking and financial services organisations in the world. Guided by our purpose of opening up a world of opportunity, our ambition is to become the world’s most trusted bank globally, putting customers at the heart of everything we do.

The Role

The CTOi Head of Control Operations owns the control environment across CTO Infrastructure (CTOi) and evolves how controls are managed through proactive and data-based oversight. This role represents CTOi across key risk and control forums including the Technology RCMM chaired by the GCIO. You’ll partner with senior stakeholders across technology and the wider business to strengthen the technology risk and control framework and improve how issues are identified and addressed. The remit spans information security, infrastructure, applications and vendor management in a highly regulated environment. You’ll oversee a direct organisation of 170 people and manage an associated budget of USD 15m. Success means clearer control ownership, faster identification and closure of gaps and measurable improvements in control effectiveness and reporting.

What you'll be doing

• Own controls across CTOi and set a proactive, data-based approach to controls management and transformation
• Represent CTOi at risk and control forums including the Technology RCMM chaired by the GCIO
• Develop and maintain the technology risk and control framework aligned to enterprise risk strategy and regulatory requirements
• Establish policies and procedures across technology risk and control including disaster recovery, incident response and risk and security awareness training
• Identify and assess technology risks across information security, infrastructure, applications and vendor management
• Implement risk mitigation strategies and controls in partnership with technology teams and key stakeholders
• Monitor and report control effectiveness including the identification and resolution of control deficiencies and gaps
• Coordinate with operational risk, compliance and internal audit to manage technology risks in an integrated and consistent way

What we're looking for

• Bring substantial experience building and running technology risk and control frameworks in a regulated environment
• Demonstrate experience shaping policies and procedures for disaster recovery, incident response and security and risk awareness
• Show proven capability identifying and assessing technology risks across information security, infrastructure, applications and third-party providers
• Evidence delivery of effective risk mitigation strategies and control improvements with measurable outcomes
• Bring experience monitoring control performance, reporting to senior governance forums and closing control gaps
• Demonstrate strong stakeholder partnership across technology and business leadership including executive-level forums
• Show experience coordinating with second line risk functions, compliance and internal audit to align risk outcomes
• Bring experience managing budgets and resources for risk and control initiatives and working with vendors and partners

Strengthening CTOi Control Operations

This is a senior, Director level opportunity to shape how CTO Infrastructure governs controls and manages technology risk at scale. You’ll set the direction for control transformation and ensure CTOi is represented in the forums where decisions are made. The scope spans core technology domains and key third parties with a clear focus on improving control effectiveness. If this matches the impact you want to have we’d welcome your application.

Being open to different points of view is important for our business and the communities we serve. At HSBC, we’re dedicated to creating diverse and inclusive workplaces - no matter their gender, ethnicity, disability, religion, sexual orientation, socio-economic background or age. We are committed to removing barriers and ensuring careers at HSBC are inclusive and accessible for everyone to be at their best. We take pride in being a Disability Confident Leader and will offer an interview to people with disabilities, long term conditions or neurodivergent candidates who meet the minimum criteria for the role.

If you have a need that requires accommodations or changes during the recruitment process, please contact the Recruiter.