Senior Manager, Resilience Risk, Technology and Cyber Security | Kuala Lumpur, MY

HSBC; Kuala Lumpur; On-site; MYR 150,000 - 250,000; Full time

Job summary

HSBC is seeking a Senior Manager for Resilience Risk, focusing on Technology and Cyber Security. This role involves defining and managing enterprise-wide risk management strategies, providing expert advice, and ensuring compliance with regulatory expectations. The ideal candidate will possess strong leadership skills and extensive experience in risk management, particularly in the fields of Data and Cyber Security. Join HSBC for a world of opportunities and contribute to a dynamic risk landscape.

Qualifications

• Strong leadership with influence at senior levels.
• Deep knowledge in Data, Technology, and Cyber Security risk management.
• Effective communication skills for stakeholder engagement.

Responsibilities

• Providing technical advice on risk assessments and control environments.
• Monitoring external environments for emerging risks and advising on mitigation controls.
• Leading regulator and audit engagements related to RR risks.

Skills

Leadership

Risk Management

Cyber Security

Data Management

Stakeholder Engagement

Education

Bachelor's degree

Relevant professional certifications

Job description

Senior Manager, Resilience Risk, Technology and Cyber Security

Senior Manager, Resilience Risk, Technology and Cyber Security

Some careers have more impact than others.

If you're looking for a career where you can make a real impression, join HSBC and discover how valued you'll be. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

Global Risk is a thriving and expert risk management function supporting HSBC globally. Its sub-function, Global Operational and Resilience Risk (ORR), ensures HSBC understands and controls its non-financial risk. It also provides resilience risk stewardship across global businesses, functions, and entities.

We are seeking an ambitious individual for the role of Senior Manager, Resilience Risk, Technology and Cyber Security. This role involves defining, managing, and achieving robust enterprise-wide risk management.

Global Enterprise Risk Management (ERM), a sub-function of Group Risk and Compliance, supports the integration of our Group Framework and Appetite Management, overseeing the Risk Taxonomy. As risks evolve in complexity and interconnectedness, this role is crucial for navigating today’s dynamic risk landscape. The goal is to develop a holistic view of the most significant risks to the Group's objectives.

This position is responsible for Risk Stewardship of Data, Technology, and Cyber Security Resilience Risks.

Resilience Risk (RR) Specialists provide expert advice on specific RR risk lenses, ensuring high-quality guidance across risk types: Technology (including Cyber Security), Data, and Information Security Risks. They operate across the organization, working closely with ERM Business and Functions to support risk management efforts.

The RR Specialist's core responsibilities include:

• Providing technical advice to ERM Business and Functions, ensuring understanding of the control environment and risk assessments.
• Supporting the explanation of issues and emerging risks in non-technical terms, and advising on necessary control adjustments to stay within Risk Appetite.
• Monitoring external environments for emerging risks and advising on mitigation controls.
• Delivering expertise to enable the deployment and operation of key controls within Malaysia.
• Supporting the development of risk and regulatory reporting obligations.
• Understanding and addressing root causes of operational risk issues.
• Escalating concerns about controls and change programs as needed.
• Leading regulator and audit engagements related to RR risks, ensuring compliance and timely closure of findings.
• Supporting local Risk Framework activities to meet regulatory expectations.
• Providing training and building capability within HSBC and regional teams.

Additional country-specific responsibilities may be assigned at the discretion of the CRO and local reporting lines.

Emerging Risks & Change Oversight:

• Managing critical issues, events, and incidents, ensuring appropriate escalation and resolution.
• Educating stakeholders on the impact of emerging risks and necessary control changes.
• Ensuring Data, Technology, and Cyber/Digital initiatives are well-managed during significant changes.

Conduct Impacts:

• Overseeing identification and management of conduct impacts related to Data, Technology, and Cyber Security risks.

Requirements:

• Strong leadership with influence at senior levels.
• Deep knowledge and experience in Data, Technology, and Cyber Security risk management.
• Business acumen and experience in resilience risk areas.
• Effective communication skills for stakeholder engagement.
• Knowledge of external threats, regulatory landscape, and internal controls.
• Bachelor's degree and relevant professional certifications (advantageous).

Key Capabilities:

• Providing expert advice and challenge.
• Implementing risk policies.
• Reviewing and challenging risks and controls.
• Applying risk management in context.

Due to local laws, candidates with immediate right to work and no need for relocation will be prioritized.

Join HSBC for a world of opportunities.

HSBC values diversity and inclusion, supporting professional growth, flexible working, and an inclusive environment. Personal data from applications will be handled per our Privacy Statement on our website.

Issued by HSBC Bank Malaysia Berhad