Service Management / Senior Consultant Specialist

HSBC Holdings; Pune District; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

HSBC Software Development India is seeking a seasoned professional to strengthen non‑financial risk and controls across the entity. You will assess risk adequacy, report to senior stakeholders, and drive remediation in collaboration with infrastructure, product, and engineering teams.

The role spans vulnerability management, identity and access management, SDLC and DEPL, and change and IT operations. You will shape future risk frameworks while ensuring alignment with Group Standards and Audit

Qualifications

• Experience in cyber and technology risk and controls including vulnerability management and IAM.
• Hands-on knowledge of SDLC, DEPL, change management and IT operations in control design/remediation.
• Ability to coordinate monitoring, testing, remediation and reporting across teams.

Responsibilities

• Ensure resources and infrastructure are in place to sustain risk and control capability across the Entity.
• Assess the adequacy of the risk and control environment and report findings to senior stakeholders.
• Review proposals to confirm completeness, raise gaps and track actions to closure.
• Coordinate Read Across exercises and support RTCL updates.
• Coordinate Critical Process Updates within framework timelines.
• Govern adherence to Group Standards and respond to Audit requirements.
• Oversee dispensation requests related to risk management across countries.
• Identify risk and control trends to shape practical improvements.
• Influence future risk management and regulatory framework development.

Skills

Cyber risk & controls

Vulnerability management

Identity & access management

SDLC & DEPL & change management

IT operations in control design

Stakeholder communication

Job description

Some careers shine brighter than others.

If you’re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.

Why HSBC

HSBC is one of the largest banking and financial services organisations in the world. Guided by our purpose of opening up a world of opportunity, our ambition is to become the world’s most trusted bank globally, putting customers at the heart of everything we do.

The Opportunity

This role sits at the centre of how we manage Non-Financial Risk and controls across the Entity. You’ll assess the adequacy of the risk and control environment then report clearly to senior stakeholders with actions tracked through to closure. The role spans core technology and cyber domains including vulnerability management, identity and access management, SDLC and DEPL and change and IT operations. You’ll work across infrastructure teams, service owners, engineers and third parties to align priorities and unblock remediation. Success looks like robust risk control assessments, effective control monitoring and testing and clear evidence of adherence to Group Standards, regulatory expectations and audit requirements. You’ll also help shape future‑fit risk management and regulatory frameworks based on emerging trends.

What you'll be doing:

• Ensure resources and infrastructure are in place to sustain Risk and Control capability across the Entity
• Assess the adequacy of the risk and control environment then report findings through clear senior-level updates
• Review MSII proposals to confirm completeness, raise gaps and track actions through to closure
• Complete Read Across exercises in line with the global methodology
• Support RCA refresh processes and help control owners when RTCL (Risk Taxonomy and Control Library) updates are released
• Coordinate Critical Process Updates in line with the framework timeline
• Govern adherence to Group Standards and regulatory expectations and respond to Group Audit requirements
• Oversee dispensation requests from countries related to the management of the risk environment
• Identify risk and control trends to anticipate future developments and shape practical improvements
• Influence the development and implementation of future‑fit risk management and regulatory frameworks

What we're looking for:

• Bring substantial experience across cyber and technology risk and controls including vulnerability management and identity and access management
• Apply hands‑on knowledge of SDLC and DEPL and change management and IT operations in control design and remediation
• Coordinate control monitoring, control testing, control remediation, control assessment and control reporting across infrastructure teams
• Partner with service owners, product owners, engineers, infrastructure teams and third parties to align priorities and remove blockers
• Translate technical remediation into business impact, risk reduction and customer outcomes for senior stakeholders
• Produce clear written reporting for senior stakeholders including risk assessments and control evidence
• Demonstrate a strong risk mindset across security, resilience and operational risk requirements
• Build effective stakeholder relationships across CCO Tech and Cybersecurity and Data Architecture and work closely with technical SMEs

You’ll achieve more when you join HSBC.

www.hsbc.com/careers

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

Issued by - HSBC Software Development India