Cyber Security Manager (Omani National)

HSBC Holdings plc; Muscat; On-site; OMR 60,000 - 90,000; Full time

Job summary

HSBC Holdings plc in Oman seeks a Cybersecurity Manager to lead the Cybersecurity Function for the Oman branch as part of the global organization. The role defines and implements an enterprise cybersecurity program that evolves with threats and regulatory requirements, while building trusted relationships with country and regional stakeholders.

The role oversees governance, training, and awareness sessions, and acts as Information Security Officer for Oman, reporting to senior management on

Qualifications

• A full-time graduation degree of at least three years is essential for obtaining a UAE visa and work permit.
• A minimum of a bachelor’s degree, with at least 10 years’ experience in IT security governance and operational processes, preferably within the financial services industry or a global corporate services environment.
• Experience in Risk management, Audit
• Strong written and verbal communication skills, with the ability to adapt communication style to different audiences. Fluency in written and spoken English is required.
• Ability to explain complex cybersecurity concepts clearly to non-technical stakeholders.
• Self-motivated with the ability to learn quickly and apply new knowledge effectively.

Responsibilities

• Lead and implement an enterprise cybersecurity management programme across country and region.
• Coordinate and deliver cybersecurity training and awareness sessions for staff.
• Provide updates on the security posture to the Country Board and senior management.
• Develop, implement and monitor a strategic security programme aligned with regulatory requirements.

Skills

Cybersecurity governance

Stakeholder management

Leadership

Risk management

Regulatory compliance

English communication

Education

Bachelor's degree in IT/Computing

Job description

If you’re looking for further opportunities to develop your career, take the next step in fulfilling your potential right here at HSBC.

Cybersecurity enables businesses and functions to manage information security risks by ensuring that risks and controls are assessed and implemented appropriately, objectively and independently, supported by professional and specialized subject-matter expertise.

The Cybersecurity Manager will lead the Cybersecurity Function for the Oman branch as part of the global and regional Cybersecurity organization. The role will be responsible for defining and implementing an industry-leading cybersecurity service that evolves in response to the constantly changing information security threat landscape.

The role holder will build trusted relationships with country and regional senior stakeholders, support regional cybersecurity initiatives and act as the Information Security Officer for Oman. Responsibilities will also include addressing local regulatory requirements, representing the organization at financial-sector cybersecurity forums, and acting as the key contact for internal and external auditors on cybersecurity matters.

Duties & Responsibilities

• Collaborate with Global, Regional and Country Technology representatives, as well as peer managers, to deliver team objectives within applicable country policies, budgetary limits and regulatory requirements.
• Lead and support colleagues in developing, implementing and monitoring a strategic, comprehensive enterprise cybersecurity management programme.
• Support Group and Regional business technology planning by providing up-to-date insight into current capabilities and a forward-looking view of technology and systems.
• Contribute to the Country and Regional Cybersecurity strategy, protecting the bank’s technology environment while upholding and enhancing HSBC’s values, reputation and stakeholder value.
• Support the Regional Chief Information Security Officer in delivering global cybersecurity programmes across the region and country.
• Coordinate and deliver cybersecurity training and awareness sessions to strengthen employees’ understanding of information security. Set performance objectives for direct reports and support their professional development.
• Work with business stakeholders across the organization to raise awareness of risk management matters, communicate the country’s cybersecurity risk profile and promote appropriate risk mitigation and control actions.
• Balance organizational security requirements with business objectives to manage security risks while enabling the achievement of strategic goals.
• Monitor the evolving threat landscape and brief the Country Board and senior management on the bank’s security posture, emerging threats and significant events affecting the financial-services industry.
• Provide country management with regular updates on cybersecurity improvement initiatives, including their benefits, progress, key challenges and any decisions or support required.
• Provide guidance to ensure that country-specific cybersecurity regulatory requirements are addressed promptly through the implementation of appropriate controls and the development or enhancement of policies and standards.
• Support cybersecurity governance activities by maintaining alignment with Global and Regional messaging and ensuring that formal oversight is exercised through the appropriate governance forums.
• Lead, coordinate and manage cybersecurity committee meetings, including agendas, materials, actions and follow-up.
• Strengthen and maintain the bank’s relationships with the Central Bank and other relevant regulatory authorities.

Experience & Qualifications

• A full-time graduation degree of at least three years is essential for obtaining a UAE visa and work permit. For degrees obtained outside the UAE, valid attestations and equivalency are also mandatory.
• A minimum of a bachelor’s degree, with at least 10 years’ experience in IT security governance and operational processes, preferably within the financial services industry or a global corporate services environment.
• Experience in Risk management, Audit
• A positive and professional approach, with the ability to work effectively as part of a team.
• Flexible, adaptable and open to change.
• Confident, accountable and willing to take ownership of responsibilities and ongoing professional development.
• Strong written and verbal communication skills, with the ability to adapt communication style to different audiences. Fluency in written and spoken English is required.
• Ability to explain complex technical and cybersecurity concepts clearly to non-technical stakeholders.
• A proven commitment to delivering high-quality customer service.
• Ability to build effective working relationships quickly with a broad range of stakeholders.
• Self-motivated, with the ability to learn quickly and apply new knowledge effectively.

We support our staff to adopt flexible and alternative ways of working where possible, including working from home and different hours subject to approvals.

HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working, and opportunities to grow within an inclusive and diverse environment.

Issued by The Hong Kong and Shanghai Banking Corporation Limited