Senior Cyber Risk & Governance Lead

HSBC Group; Sheffield; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Private healthcare

Pension scheme

Enhanced maternity & adoption pay

Job summary

HSBC Group is seeking a senior cybersecurity leader to act as the trusted partner for Group Functions Technology, shaping cyber risk, governance and control priorities across Risk, Finance, Treasury and corporate functions.

You will advise senior technology and business stakeholders, drive risk-based remediation, and ensure evidence-based assurance across complex SaaS and third-party environments.

Qualifications

• Significant cybersecurity experience in a regulated organisation.
• Experience advising senior technology and business stakeholders.
• Strong cyber risk, governance and controls capability.
• Excellent written and spoken English; ability to chair governance forums.

Responsibilities

• Act as the senior cybersecurity partner for GFT domains, advising leadership on material cyber risks and trade-offs.
• Own and drive the cyber risk profile, maintain risk registers and remediation plans.
• Lead control governance and assurance readiness with timely evidence and closure of findings.
• Embed security-by-design across change delivery and supplier/SaaS risk management.
• Provide leadership during incidents and produce decision-grade reporting for senior stakeholders.
• Translate technical exposures into business impacts for governance forums.

Skills

Cyber risk governance

Controls & assurance

Incident management

Executive reporting

Security-by-design

Identity & access

Threat management

Vulnerability management

Data protection

Cloud risk

Third-party risk

Audit liaison

Communication

Job description

HSBC Group is seeking a senior cybersecurity leader to act as the trusted partner for Group Functions Technology, shaping cyber risk, governance and control priorities across Risk, Finance, Treasury and corporate functions.

You will advise senior technology and business stakeholders, drive risk-based remediation, and ensure evidence-based assurance across complex SaaS and third-party environments.