Avp - Bengaluru, India - HSBC

HSBC

Verified Company

Bengaluru, India

1 week ago

Posted by:

Deepika Kaur

beBee Recuiter

Description

Job description

Some careers shine brighter than others.
If you're looking for a career that will help you stand out, join HSBC and fulfil your potential.

Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories.

We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions

Role Purpose

The Control Office is a function that sits within the markets business within the Markets & Securities Services area of HSBC. The Control Office helps manage and control nonfinancial and new risks in the business, including but not limited to operational, conduct and product lifecycle risk.

What you'll do:

Impact on the Business/Function

Be responsible for providing cyber and information security risk management input to the business in support of their overall operational risk management activities, working alongside the onshore BIROs, business management and control officers to articulate and understand these risks and ensuring that they are appropriately reflected in business Risk Control Assessment (RCA) driving related RCA activities as required.
Assist the Global MSS Businesses in the identification, documentation and resolution of information security and Cyber risk issues (liaising with relevant functions, e.g. Cybersecurity, where required) as guided by lead / onshore BIRO.
Provide timely guidance to business on queries relating to information security, leveraging strong knowledge of Bank policies, industry good practice and requirements of NFR management process to drive derisking of Business processes. This includes review of any exceptional access requests to ensure exceptional access is only granted where required and with appropriate mitigating controls.
Support the business and onshore BIROs in ensuring that technology, cyber and information security risks in the RCAs are adequately assessed, documented, with gaps identified and appropriate remedial actions agreed. Support the business in developing and executing appropriate monitoring plans for these risks.
Support the business in ensuring that information security related incidents are appropriately triaged and managed, including following up with respective parties to ensure remedial actions are undertaken
Provide SME input into risk reductions initiatives and support BIRO delivery of these initiatives by supporting programme management, reporting & governance activities for initiatives. Support the business by ensuring business owned risk reduction activities are robust and sustainable.

Typical Targets and Measures

Responsibility for reviewing, processing, escalating and closing cases in a timely manner
Ensure as much as possible that escalations to Global BIRO are genuine
Production of accurate MI

Customers / Stakeholders

Meet expectations of business partners and London Control Office
Develop relationships with Resilience Risk, and other 2LOD functions as required, ensuring 2LoD observations are understood and where required, remediation plans are in place and remediation is appropriately tracked and reported.
Be responsible for providing Business and MSS CCO management with a view of their information risk landscape through appropriate assessment of technology, information security and cyber issues across the fronttoback businesses, reviewing the external risk landscape, available metrics and providing timely updates, and for revisiting these assessments periodically to ensure ongoing relevance.
Be responsible for undertaking deep dives of cyber and information technology issues, as directed by the Chief Control Officer and Lead BIRO, recommending and delivering practical remediation activities.

Typical Targets and Measures

To create confidence in London Control Office and business to offshore tasks
Ability to suggest and propose changes to processes; driving change
Feedback from local and London Control Office management, businesses and other stakeholders

Leadership & Teamwork

Ability to act proactively and multitask
Knowledge transfer to the team and learn from other team members
Self motivated, enthusiastic and proven rapid leaning capability
Actively participate in team meetings. Bringing solutions / suggestions / recommendations to the table.
Ability to work efficiently without supervision

Typical Targets and Measures