Security Consultant

HSBC Global Services Limited; Sheffield; On-site; GBP 40,000 - 80,000; Full time

Job summary

Ein etabliertes Unternehmen im Finanzsektor sucht einen Sicherheitsberater, der innovative Sicherheitsrichtlinien entwickelt und die Einhaltung von Sicherheitsstandards gewährleistet. In dieser spannenden Rolle arbeiten Sie eng mit Führungskräften zusammen und unterstützen die Cybersecurity-Teams, um Bedrohungen zu identifizieren und zu begegnen. Sie werden Teil eines dynamischen und unterstützenden Teams, das Wert auf berufliche Entwicklung und Vielfalt legt. Wenn Sie eine Leidenschaft für Cybersicherheit haben und Ihre Fähigkeiten in einem agilen Umfeld erweitern möchten, ist dies die perfekte Gelegenheit für Sie.

Benefits

Berufliche Weiterbildung

Private Gesundheitsversorgung

Erweiterte Elternzeit

Beitragsorientierte Rentenregelung

Qualifications

• Erfahrung in der Entwicklung von Sicherheitsrichtlinien und Risikomanagement.
• Kenntnisse in Sicherheitsstandards wie ISO27001 und NIST CSF.

Responsibilities

• Entwicklung von Sicherheitsrichtlinien und Verfahren für die Governance.
• Bewertung von Risiken und Einhaltung von Sicherheitsrahmenwerken.
• Forschung und Vorschlag innovativer Sicherheitslösungen.

Skills

Entwicklung von Sicherheitsrichtlinien

Bedrohungsmodellierung

Risikobewertung

Kenntnis von Sicherheitsstandards

Technisches Schreiben

Job description

Join a digital first bank that’s powered by people.

Our technology team builds innovative digital solutions rapidly and at scale to deliver the next generation of banking services for our customers around the world.

We have an entrepreneurial mindset. Our people work together, creating an agile, collaborative, and innovative culture. You’ll learn and expand your skills, plus we will support you every step of the way as you grow your career.

The Managed File Transmission Team

The team manages file transfers for internal and external customers via shared gateways across various platforms, supporting highly reliable, resilient, and secure services. They oversee all aspects of project lifecycle, ensuring compliance with policies, guidelines, and standards, and continually seek process improvements by collaborating with the MFT Engineering Team.

Role Overview

This role involves working with senior leaders on enterprise initiatives, defining and developing MFT Security Policy, ensuring compliance with HSBC Security Policies, and partnering with the Cybersecurity team to address cyber threats.

Benefits

As an HSBC UK employee, you will have access to professional development, private healthcare, enhanced maternity and adoption pay, and a contributory pension scheme.

Key Responsibilities

• Develop security policies, procedures, and plans for governance
• Advise MFT technology teams as the security authority
• Assess risks and compliance with security frameworks like CAF, NIS/NIS2, ISO27001, NIST CSF, CIS
• Produce risk assessments and reports, recommend improvements, and mitigate risks
• Understand business and cyber security threats and challenges
• Communicate findings and recommendations effectively
• Review existing controls and suggest security enhancements
• Research and propose innovative security solutions
• Perform threat modelling and support new technology designs
• Adhere to policies and escalate issues as needed
• Ensure quality, risk management, and compliance in tasks

Minimum Requirements

• Experience in developing security policies, threat modelling, and risk assessment
• Knowledge of security standards and frameworks (CAF, NIS/NIS2, ISO27001, NIST CSF, CIS)
• Experience in reviewing security controls and policies
• Understanding of security testing and vulnerability management
• Leadership in cybersecurity projects
• Technical writing skills

The role is based in Sheffield.

Our Commitment

We value diversity and inclusion, are a Disability Confident Leader, and support candidates with disabilities or neurodivergence through the recruitment process. For accommodations, contact our Recruitment Helpdesk at hsbc.recruitmenthsbc or [phone].