Sr Associate Director - Risk & Control Lead

HSBC Holdings plc; Sheffield; On-site; GBP 75,000 - 110,000; Full time

Benefits offered by this job

Private healthcare

Enhanced maternity and adoption pay

Contributory pension scheme

Job summary

HSBC Holdings plc seeks a technology risk professional to lead control frameworks and operating models across applications, infrastructure, data, cyber and security. You will partner with senior stakeholders to drive accountability and improvements.

You will use dashboards and metrics to identify control weaknesses, perform audits and tests, and guide remediation with a focus on automation and continuous monitoring. Leadership across dispersed teams is essential.

Qualifications

• Experience leading technology control frameworks and operating models across apps, infrastructure, data, cyber, security and architecture.
• Strong experience in audits, control testing and end-to-end issue lifecycle.
• Ability to present risk information clearly to senior stakeholders and drive accountability.
• Experience using dashboards, metrics and reporting to identify control weaknesses and prioritise remediation.
• Experience with automation, analytics or continuous control monitoring to improve control efficiency.
• People leadership experience across dispersed teams.
• Knowledge of COBIT, NIST, ISO 27001, COSO or the Three Lines Model.

Responsibilities

• Lead technology control frameworks and operating models across multiple domains (apps, infra, data, cyber, security).
• Conduct audits and control testing and manage the end-to-end issue lifecycle with root-cause analysis and closure.
• Present complex risk information to senior stakeholders and drive accountability in a matrix environment.
• Utilise dashboards and metrics to identify control weaknesses and prioritise remediation efforts.
• Leverage automation, analytics or continuous monitoring to improve control efficiency and transparency.
• Provide demonstrable leadership across sizeable or geographically dispersed teams.

Skills

Technology risk

Controls and governance

Audit experience

Stakeholder management

Analytical reporting

Leadership

Education

Risk/Audit/Security qualifications

Job description

Deep expertise in technology risk, controls, audit, assurance, governance or operational risk within financial services or another highly regulated, complex global organisation. Proven ability to lead technology control frameworks and operating models across areas such as applications, infrastructure, data, cyber, security and architecture. Strong experience of audits, control testing and the end-to-end issue lifecycle, including root-cause analysis, corrective action, evidence, validation and closure. Credibility and confidence with senior stakeholders, with the ability to present complex risk information clearly, challenge constructively and drive accountability in a matrix environment. Strong analytical judgement and experience using dashboards, metrics and reporting to identify control weaknesses, prioritise remediation and support informed decisions. Experience using automation, analytics or continuous control monitoring to improve control efficiency, transparency and effectiveness. Demonstrable people leadership experience, including leading sizeable or geographically dispersed teams and developing colleagues through change and competing priorities. Knowledge of recognised control frameworks or standards such as COBIT, NIST, ISO 27001, COSO or the Three Lines Model; relevant risk, audit, security or programme qualifications are advantageous. As an HSBC employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package.

• private healthcare for all UK-based employees
• enhanced maternity and adoption pay and support when you return to work
• a contributory pension scheme with a generous employer contribution