Security Consultant

TN United Kingdom; Sheffield; On-site; GBP 45,000 - 75,000; Full time

Job summary

Ein innovatives Unternehmen sucht einen technischen Leiter für die Managed File Transmission Team. In dieser Rolle entwickeln Sie Sicherheitsrichtlinien und -verfahren, bewerten Risiken und arbeiten eng mit Führungskräften und Cybersecurity-Teams zusammen, um komplexe Initiativen zu steuern. Sie haben die Möglichkeit, in einem dynamischen Umfeld zu arbeiten, in dem Ihre Expertise zur Verbesserung der Sicherheitsstandards und zur Unterstützung der digitalen Transformation beiträgt. Wenn Sie eine Leidenschaft für Cybersicherheit und Governance haben, könnte dies die perfekte Gelegenheit für Sie sein.

Benefits

Private Gesundheitsversorgung

Erweiterte Mutterschafts- und Adoptionsvergütung

Betriebliche Altersvorsorge

Professionelle Entwicklungsmöglichkeiten

Qualifications

• Erfahrung in der Entwicklung von Sicherheitsrichtlinien und Risikobewertungen.
• Starke Kenntnisse in Sicherheitsstandards und -methoden.

Responsibilities

• Entwicklung von Sicherheitsrichtlinien und -verfahren für robuste Governance.
• Durchführung komplexer Risikobewertungen und Bedrohungsmodellierungen.

Skills

Entwicklung von Sicherheitsrichtlinien

Bedrohungsmodellierung

Risikobewertung

Kenntnisse in CAF, NIS/NIS2, ISO27001, NIST CSF, CIS

Technisches Schreiben

Job description

Social network you want to login/join with:

Join a digital first bank that’s powered by people.

Our technology team builds innovative digital solutions rapidly and at scale to deliver the next generation of banking services for our customers around the world.

We have an entrepreneurial mindset. Our people work together, creating an agile, collaborative, and innovative culture. You’ll learn and expand your skills, and we will support you every step of the way as you grow your career.

The Managed File Transmission Team is responsible for managing file transfers for both internal and external customers of HSBC via shared file gateways on various platforms, products, technology, and standards supporting file transfers across the HSBC Group for all lines of business.

The team supports several technologies that provide highly reliable, resilient, and secure services. The team manages all aspects of the project lifecycle, ensuring compliance with bank policies, guidelines, governance, and standards. Team members are also encouraged to explore new processes and continually seek improvements in the File Transmissions Domain globally by working closely with the MFT Engineering Team.

The role involves working with senior leaders to deliver complex, enterprise-level initiatives aligned with the bank's strategic goals. The Technical Leader will play a key role in defining and developing the MFT Security Policy and ensuring compliance with HSBC Security Policies and Standards. The role also involves collaborating with HSBC Cybersecurity to understand and respond to cyber threats.

As an HSBC UK employee, you will have access to professional development opportunities, a competitive benefits package, private healthcare, enhanced maternity and adoption pay, and a contributory pension scheme with a generous employer contribution.

In this role, you will:

• Develop security policies, procedures, and plans for robust governance.
• Act as the MFT security authority, advising MFT technology teams.
• Evaluate risks at technical and process levels, assessing systems for compliance with frameworks like CAF, NIS/NIS2, ISO27001, NIST CSF, and CIS.
• Produce detailed risk assessments and reports, recommend improvements, and propose solutions to mitigate security risks.
• Understand the business and information risk landscape, including cyber threats and operational challenges faced by MFT teams.
• Communicate risk findings and recommendations effectively to stakeholders.
• Review and enhance existing controls against recognized frameworks.
• Research and analyze security technologies to support innovative security solutions.
• Perform complex risk assessments and threat modeling for new technologies.
• Adhere to HSBC policies and procedures, raising concerns promptly.
• Apply standards to tasks to ensure quality, risk management, and compliance.

To be successful in this role, you should:

• Have experience in developing security policies, threat modeling, and risk assessment.
• Possess strong knowledge of CAF, NIS/NIS2, ISO27001, NIST CSF, CIS, and risk assessment methodologies.
• Have experience reviewing security standards, controls, and policies, and recommending enhancements.
• Understand security testing principles, including vulnerability scanning, risk resolution, and reporting.
• Have led and delivered cybersecurity projects.
• Be capable of performing complex risk assessments and threat modeling.
• Possess technical writing skills for queries, reports, and presentations.

This role is based in Sheffield.

Opening a world of opportunity

We value diverse perspectives and are committed to creating inclusive workplaces. HSBC is a Disability Confident Leader and offers interviews to candidates with disabilities, long-term conditions, or neurodivergence who meet the minimum criteria. If you need accommodations during the recruitment process, please contact our Recruitment Helpdesk.