Manager, Business Risk and Control

HSBC Holdings plc; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

HSBC Holdings plc in Bengaluru seeks a Manager, Business Risk and Control to support proactive management of information security, cyber and technology risks across IWPB. You will coordinate with stakeholders, control owners, Technology, Cybersecurity and risk teams to identify, assess and remediate risks.

You will maintain risk assessments, governance materials, dashboards and issue tracking, strengthening information security culture and embedding IWPB information risk framework.

Qualifications

• Experience with information security, cyber risk, technology risk within financial services.
• Understanding risk assessments, governance reporting and incident remediation.

Responsibilities

• Assist the GBIRO with day-to-day management of IWPB information security and risk activities in Bengaluru.
• Prepare and maintain Risk and Control Assessments; document risks and remediation actions.
• Maintain records of information risk issues, audit observations, control gaps and remediation plans.

Skills

Information security

Cyber risk

Technology risk

Governance reporting

Stakeholder management

Risk assessments

Issue tracking

Data analysis

Job description

Job Title: Manager, Business Risk and Control

• The Manager, Business Risk and Control, is a first line of defense role that operates within the IWPB BRR Centre of Excellence in Bengaluru, to support the proactive management of information security, cyber and technology risks across International Wealth and Premier Banking (IWPB), in partnership with the Global Business Information Risk Officer (GBIRO) and Global IWPB Business Resilience Risk team
• The role will coordinate with stakeholders, control owners, Technology, Cybersecurity and risk teams to identify, assess and remediate information risks. It will also maintain risk assessments, management information, issue tracking and governance materials, while strengthen information security culture and embedding the IWPB information risk framework.

In this role, you will:

Principal Accountabilities and Responsibilities

Support the GBIRO

• Assist the GBIRO with the day-to-day management of IWPB information security, cyber and technology risk activities in Bengaluru, ensuring agreed priorities, actions and governance requirements are progressed.

Risk and Control Assessments

• Support the preparation, review and maintenance of Risk and Control Assessments by gathering evidence, validating control information, documenting risks and tracking agreed remediation actions.

Risk and issue management

• Maintain accurate records of information risk issues, audit observations, control gaps and remediation plans. Monitor progress, identify delays and elevate matters to the GBIRO in a timely manner.

Stakeholder coordination

• Coordinate with IWPB business teams, COOs, control owners, Technology, Cybersecurity, Operational Risk, Compliance, Audit and 2LOD stakeholders to obtain information and support the resolution of requests and observations.

Management information and reporting

• Prepare regular dashboards, status reports, governance packs and metrics covering open risks, control performance, remediation progress, audit points and key information security activities.

Control monitoring and evidence

• Support the implementation and ongoing monitoring of key information security controls by coordinating evidence collection, reviewing submissions for completeness and highlighting exceptions or potential weaknesses.

Information security awareness and culture

• Support the GBIRO in delivering communications, awareness activities, training and engagement initiatives that promote secure behaviour, good conduct and timely escalation of information security concerns across IWPB Bengaluru.

Teamwork

• Work closely with the GBIRO to plan, prioritise and deliver the IWPB information risk agenda within the Bengaluru department.
• Build effective working relationships with business teams, control owners, Technology, Cybersecurity, Operational Risk, Compliance and Audit.
• Coordinate with local and global stakeholders to ensure information risk requests, actions and reporting are completed accurately and on time.
• Support the IWPB DBIRO or security champion network by sharing guidance, coordinating meetings, maintaining action logs and following up on agreed activities.
• Contribute to working groups, governance forums and risk meetings by preparing agendas, minutes, materials and action tracking.
• Encourage early escalation and constructive challenge, ensuring that concerns are raised promptly rather than allowed to become avoidable surprises.
• Share knowledge and practical guidance with colleagues, supporting a collaborative, inclusive and risk-aware team environment.

To be successful you will:

Functional Knowledge

• Should have minimum of 3-4 years of working knowledge of information security, cyber risk, technology risk and internal control principles within a financial services environment.
• Understanding risk assessments, control monitoring, issue management, audit remediation and governance reporting.
• Ability to collect, analyze and present information clearly, with strong attention to detail and data quality.
• Ability to understand technical risk information and summaries its business relevance for the GBIRO and IWPB stakeholders.

Others

• Experience in information security, cyber risk, technology risk, operational risk, audit, compliance or control-related activities.
• Experience supporting risk assessments, control reviews, issue tracking or remediation programmers.
• Experience preparing management information, governance packs, dashboards or committee materials.
• Experience working with multiple stakeholders in a matrix or regulated environment would be advantageous

Hsbc.Com/Careers

You’ll achieve more at HSBC

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.\