MENAT IWPB Resilience Risk Manager

HSBC Holdings plc; Bengaluru; On-site; INR 2,400,000 - 3,600,000; Full time

Job summary

HSBC Holdings plc in Bengaluru seeks a MENAT IWPB Resilience Risk Manager. You will act as a resilient risk SME across technology, data, third party and business interruption themes, aligning with the Risk Management Framework and enterprise appetite.

You will guide 1LoD on risk identification, assessment and control design, ensuring robust RCA and remediation plans. Lead end-to-end incident, issue and event management, governance updates and action tracking, and support regional reviews and

Qualifications

• Demonstrable experience in Non-Financial Risk / Resilience Risk / Operational Resilience / Technology Risk / Cyber Risk / Data Risk / Third Party Risk within a bank/financial services organisation or relevant consultancy.
• Hands-on experience with incident/issue/event management including logging, triage, severity/materiality assessment, escalation, governance updates, action tracking and closure evidence.
• Strong stakeholder management and ability to influence across Technology and Business teams.

Responsibilities

• Act as MENAT IWPB Resilience Risk SME across multiple risk themes, ensuring alignment to Risk Management Framework and risk appetite.
• Provide SME guidance on resilience risk identification, assessment and control design with evidence and remediation plans.
• Coordinate risk and control assessments and monitor remediation of key resilience risks.
• Drive governance discipline across MENAT markets and escalate material concerns timely.
• Support deployment of Group strategies and translate expectations into practical actions for markets.

Skills

Non-Financial Risk

Resilience Risk

Operational Resilience

Technology Risk

Cyber Risk

Data Risk

Third Party Risk

Tools

Helios

Risk Map

Risk Appetite Statement

KCIs/OKRs

Productivity Suite

Job description

Job title: MENAT IWPB Resilience Risk Manager

• The role holder is accountable for delivering the MENAT IWPB Resilience Risk agenda across key resilience domains including Technology & Cybersecurity, Data Risk, Third Party Risk, Transaction & Payment Processing Risk and Business Interruption Risk, aligned to the Risk Management Framework and Enterprise Risk appetite.
• The role holder will act as a subject matter expert (SME) and trusted advisor to the business, supporting the identification, assessment, monitoring and treatment of resilience risks and controls, and providing effective challenge and guidance to 1LoD stakeholders. This includes driving disciplined execution of incident, issue and event management (logging, triage, severity/materiality assessment, escalation, governance updates and closure evidence), ensuring robust root cause analysis (RCA) and remediation, and supporting risk and control assessments to improve control effectiveness and reduce operational disruption.
• In addition, the role holder supports regional governance and oversight through effective monitoring of Enterprise Risk management systems and reporting (including Helios, Risk Map, Risk Appetite Statement, Emerging and Top Risk reporting and management information), proactive review of issues and actions, identification of thematic risk areas, and delivery of tailored reviews as required. This is a key role within the BRR structure and helps drive a consistent rhythm of governance, reporting and resilience risk management across MENAT markets.

In this role, you will:

Principal Accountabilities and Responsibilities (e.g., for Business, Customers and Stakeholders; internal control environment, etc.)

Resilience Risk SME, Advisory & Control Assurance

• Act as MENAT IWPB Resilience Risk SME across Technology & Cybersecurity, Data, Digital, Transaction & Payment Processing, Third Party/Supplier and Business Interruption resilience risk themes, ensuring alignment to the Risk Management Framework and risk appetite.
• Provide SME guidance to 1LoD stakeholders on resilience risk identification, assessment and control design, including what “good” looks like for evidence, documentation, remediation plans and sustainable control effectiveness.
• Support and/or coordinate risk and control assessments (including control effectiveness assessment and control monitoring), ensuring key resilience risks are understood, owned, monitored and remediated.
• Drive improvements to resilience risk governance and control discipline across MENAT markets, including consistent standards and timely escalation of material concerns.
• Support deployment of Group strategies and initiatives across resilience risk themes (e.g., operational resilience, cyber resilience, data and third party resilience) and translate expectations into clear, practical actions for markets.

Incident, Issue & Event Management (Resilience Risk)

• Lead/coordinate end-to-end handling of resilience-related incidents, issues and events across MENAT IWPB: logging, triage, assessment, escalation, governance updates, action tracking and closure.
• Act as Secretariat for the Incident Management Team (IMT) process and support delivery of annual incident management exercises to validate preparedness, lessons learned and continuous improvement.
• Serve as a key point of contact for material business incidents, ensuring timely escalation, effective stakeholder coordination and accurate, decision-grade communications.
• Drive comprehensive reviews of RCA lifecycles, ensuring quality root cause analysis, identification of systemic themes, and robust remediation actions that reduce recurrence and improve resilience outcomes.
• Proactively review Medium rated issues and emerging patterns to identify systemic weaknesses, elevate where required, and recommend thematic reviews.

Operational Resilience / IBS Support

• Support operational resilience execution for markets (e.g., Important Business Services (IBS) and relevant resilience testing/assurance activities), working with 1LoD/2LoD SMEs and market stakeholders to improve preparedness and reduce disruption impact.
• Support risk appetite assessments by working with Regional Technology, Controls and Cyber SMEs to identify themes driving business out of appetite and to track corrective actions.

Data Breach, Cyber & Technology Resilience Oversight

• Provide targeted support to improve and sustain off-track Cyber OKRs/KCIs across MENAT markets, partnering with BIRO/CITROs and relevant stakeholders to drive delivery and raise standards.
• Optimise data breach reporting, business/BIRO adherence and documentation across IWPB MENAT, ensuring consistent classification, escalation and closure evidence.
• Support regional Critical Asset / ITAC reviews to ensure applications/assets are appropriately risk-rated, protections are enabled, and exceptions are escalated in a timely manner to manage exposure.

Regulatory & Review Support

• Support risk action plans for key regulatory and control issues impacting resilience risk areas.
• Assist with regulatory and third-party reviews (e.g., KPMG, DFSA, NESA) and manage delivery against resilience-related findings for IWPB, ensuring actions are tracked, evidenced and closed sustainably.

BRR Governance & Strategy Support (Reporting / MI / Thematic Reviews)

• Support MENAT IWPB risk governance activities to ensure key risks, controls, issues and actions are highlighted, and meetings/submissions are delivered on time and aligned with terms of reference.
• Obtain and collate management information and commentary from relevant stakeholders on a monthly basis for governance forums, ensuring narrative is clear, consistent and decision-useful.
• Monitor Enterprise Risk management systems and outputs (including Helios, Risk Map, Risk Appetite Statement, Emerging and Top Risk reporting, scorecards and management information), identifying areas requiring attention, escalation or intervention.
• Independently conduct in-depth thematic reviews as assigned by MENAT IWPB Head of NFR Governance and Optimisation, adapting technical user guidelines and providing clear guidance to country teams to ensure consistent implementation.
• Consistently review to identify new issues and actions at pace, partnering with regional SMEs and market leads to drive robust action plans and timely closure.

Leadership & Teamwork

• Build strong, trusted partnerships and ways of working across 1LoD and 2LoD stakeholders, including CCO teams, IWPB Operations, DAO, Technology, BIRO/CITROs, and 2LoD (e.g., Resilience Risk, Operational Risk, ERM, Compliance, Legal), as well as risk, control and issue owners.
• Operate with a proactive, “get it done” mindset—coordinating stakeholders at pace during incidents/events and maintaining calm, disciplined execution through to closure.
• Demonstrate confident, constructive challenge and influence, enabling better decisions on risk acceptance, prioritisation and remediation, and ensuring timely escalation of material concerns.
• Drive consistency across MENAT markets through clear guidance, practical coaching, and a joined-up approach that improves resilience risk outcomes and reduces disruption to customers and colleagues.

To be successful you will:

Functional Knowledge

Essential

• Demonstrable experience in Non-Financial Risk / Resilience Risk / Operational Resilience / Technology Risk / Cyber Risk / Data Risk / Third Party Risk within a bank/financial services organisation or relevant consultancy.
• Hands‑on experience with incident / issue / event management including logging, triage, severity/materiality assessment, escalation, governance updates, action tracking and closure evidence.
• Working knowledge of the Risk Management Framework and how it is applied through risk and control assessments, control monitoring, issue management and risk appetite oversight.
• Strong capability to analyse information, identify trends/themes (including systemic control weaknesses), and translate analysis into practical recommendations and clear management commentary.
• Strong stakeholder management skills, with the ability to influence across Technology and Business teams and provide credible SME guidance and challenge.

Desirable

• Experience supporting regulatory reviews and managing delivery against findings (e.g., DFSA/NESA or other regulators) with robust evidence and sustainable closure.
• Experience supporting operational resilience activities such as IBS identification, mapping, testing/exercises and lessons learned.
• Familiarity with enterprise risk tooling and reporting (e.g., Helios, risk appetite reporting, scorecards/KCIs/OKRs).
• Tools / ways of working
• Efficiently and accurately leveraging HSBC tooling (including Productivity Suite) to improve quality, speed and consistency of reporting, analysis and stakeholder engagement ensuring ownership and accountability of presented data.

Others

• Strong organisation and prioritisation skills; able to manage multiple workstreams in a dynamic environment, including time-critical incident/event activity.
• Ability to work independently with appropriate judgement, while collaborating effectively in a global virtual team.
• Clear, confident written and verbal communication skills, able to produce concise, decision-ready outputs for senior stakeholders and governance forums.

HSBC.com/careers

You’ll achieve more at HSBC

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc, We consider all applications based on merit and suitability to the role.

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

***Issued By HSBC Electronic Data Processing (India) Private LTD***