Job Title: AVP, FC Detection and DE
- The Financial Crime (FC) Detection & Digital Enablement CoE is an integral part of the HSBC group’s Financial Crime function. FC risk is a non-financial risk that includes fraud, money laundering, bribery and corruption, sanctions violations, terrorist financing, proliferation financing, export control violations and tax evasion.
- Within the CoE, the Privacy and Access team is there to ensure the right privacy and access management controls are implemented and applied across FC. By managing the processes and providing the guidance needed so that data is shared, stored and used in line with HSBC policy, local rules and regulations, as well as good security and privacy practice, the team provides critical capabilities to ensure FC has the data resources needed to pursue its strategy.
- In this role, you will lead day-to-day access management operations across key FC applications, ensuring access is provisioned and maintained on a least-privilege, need-to-know basis with appropriate approvals, segregation of duties controls, and in line with applicable privacy principals, rules, and regulations. You will drive operational excellence, audit readiness, risk reduction. You’ll also help drive process efficiency and innovation across Privacy & Access Management for the FC function.
In this role, you will:
Principal Accountabilities and Responsibilities
Process efficiency & operating model uplift
- Own end-to-end BAU access management for assigned FC applications, ensuring joiner/mover/leaver and change requests are delivered consistently and securely in line with data sharing rules and regulations, least-privilege, documented approvals, and segregation of duties requirements.
- Assess existing end-to-end access journeys (request, approve, provision, recertify, remove) and identify pain points, rework loops, and control gaps.
- Redesign processes using Lean principles to reduce turnaround time (TAT), manual effort, and operational risk.
- Define and maintain clear process documentation: SOPs, RACI, control maps, and user guidance.
- Build strong partnerships with FC stakeholders, application owners, and Technology teams, translating requirements into effective operations and controls perspective.
Automation of access and controls
- Partner with technology teams to automate access provisioning/de-provisioning where feasible (e.g., workflow tooling, scripts, integrations, orchestration).
- Implement “control by design”: automated validations, maker-checker controls, audit trails, exception handling, and risk-based routing.
- Build standard patterns for access controls across multiple applications (role-based access, least privilege, segregation of duties where relevant).
MI management (accurate, precise, decision-grade)
- Own MI definitions and ensure consistent, reconciled reporting across systems and processes.
- Produce high-quality dashboards and packs (daily/weekly/monthly) covering volumes, ageing, SLA/TAT, exceptions, access breaches, and recertification outcomes.
- Establish data quality checks and lineage so MI is trusted and audit-ready.
Risk, control, and stakeholder management
- Ensure access processes align with privacy, security, and regulatory expectations and stand up to audit scrutiny.
- Manage key stakeholders across Financial Crime Ops, Tech, Cyber/InfoSec, and application owners to agree requirements and implement change.
- Drive governance forums (as required): issue logs, risk acceptances, exception reporting, and remediation tracking.
- Key deliverables / outcomes
- Zero findings of data breaches and minimal findings of inappropriate access.
- Measurable improvements in Turnaround Time, ageing reduction, and exception rate reduction.
- Strong audit trail and evidence packs for controls and access governance.
- Smooth onboarding of new applications and along with efficient deployment of new countries and features.
- Standardized MI with clear definitions, reconciliations, and repeatable production.
To be successful you will:
Experience / Skills
- Proven experience in access management operations (RBAC/ABAC concepts, privileged access, approvals, recertification/attestations).
- Stakeholder management and communication skills, including senior reporting and decision facilitation.
- Demonstrable process improvement capability (Lean, Six Sigma, or equivalent practical experience).
- Strong MI capability: metrics design, data reconciliation, dashboarding, and insight generation.
- Strong Jira and Confluence experience.
- Excellent control mindset: accuracy, evidence management, audit readiness.
- Leadership experience: coaching, performance management, and building resilient teams.
Hsbc.Com/Careers
You’ll achieve more at HSBC
HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.
Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.
***Issued By HSBC Electronic Data Processing (India) Private LTD***