Senior Analyst

Some careers have more impact than others. If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be. We are currently seeking an experienced professional to join our team in the role of Senior Analyst. Business: Cybersecurity Job ID：65326 Principal responsibilities Impact on the Business/Function Deliver security research and testing projects focused on HSBC critical services and projects to ensure that design, quality and implementation of controls do not expose the bank to a significant level of risk. Achieve excellence by driving performance, compliance and security. Provide oversight and control over third party Threat-led Penetration Tests in line with the varied regional regulatory

and the organizations risk appetite. Work with key stakeholders to proactively drive the reduction in Cybersecurity risks and to improve the security risk posture of HSBC within the business risk appetite. Provide subject matter expertise and guidance to a broad range of stakeholders across global business and functions. Customers / Stakeholders Engage with relevant programmes that are critical to the bank. Understand the financial services industry security and threat landscape. Engage with a diverse set of stakeholders in order to achieve CROS objectives, including Group leadership, Business and Functions CIOs, CISOs, Cybersecurity leads and Control Owners. Engage with specialist technology functions such as, HSBC Digital, Innovation and Technology Centres. Leadership & Teamwork Strong teamwork with the global CROS as well as all Global Businesses and Functions. Establish and maintain productive relationships across the bank in the client facing role. Leadership skills and the ability to manage vendors and staff. Operational Effectiveness & Control Adherence to operational controls, as outlined in procedures and policies to ensure risks are identified and managed. Establishment of all necessary operational controls within the tools and systems used. The jobholder will ensure the fair treatment (service excellence) of our customers is at the heart of everything we do, both personally and as an organisation. Management of Risk (Operational Risk / FIM requirements) The jobholder will also continually reassess the Cybersecurity and operational risks associated with the role and inherent in the business, taking account of changing economic or market conditions, legal and regulatory requirements, operating procedures and practices, management restructurings, and the impact of new technology. This will be achieved by ensuring all actions take account of the likelihood of operational risk occurring. Also, by addressing any areas of concern in conjunction with entity management and/or the appropriate department. Observation of Internal Controls (Compliance Policy / FIM requirements) Maintains HSBC internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators. The jobholder will also adhere to and be able to demonstrate adherence to internal controls. This will be achieved by adherence to all relevant procedures, keeping appropriate records and, where appropriate, by driving the timely implementation of internal and external audit points, including issues raised by external regulators, and internally identified Cybersecurity risks. The jobholder will implement the group compliance policy by containing compliance risk in liaison with Global Head of Compliance, Global Compliance Officer, Area Compliance Officer or Local Compliance Officer. The term ‘compliance’ embraces all relevant financial services laws, rules and codes with which the business has to comply. This will be achieved by adhering to all relevant processes/procedures and by liaising with compliance department about new business initiatives at the earliest opportunity. Also and when applicable, by ensuring adequate resources. Knowledge & Experience/Qualifications Education to degree level or above (Desirable) or relevant work experience English - Fluent written and spoken Proven written and verbal communication skills Strong team management, leadership and team building skills. Ability to develop clear business impact and justification to drive investment in team capabilities Demonstrated experience running highly sensitive projects. Demonstrated experience in meeting red team regulatory requirements. Understanding of TLPT Frameworks such as CBEST, iCast, TIBER, CORIE, AASE Demonstrable experience in vulnerability identification and exploitation. Participation in the Cyber Security industry. Knowledge of malware packing, obfuscation, persistence, exfiltration techniques Knowledge on bypassing security controls such as DLP, Endpoint Protection, Firewalls, IDS/IPS and Web Proxies. Demonstrable experience in tooling, automation and prototyping. Demonstrated experience in source code review. Demonstrated experience in penetration testing. /WX You’ll achieve more when you join HSBC. HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.” Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website. ***Issued By HSBC Software Development (GuangDong) Limited*** HSBC China currently utilizes AJINGA, a third party recruitment management system, to process job applications. Please watch out for emails, SMS, and/or WeChat messages from AJINGA. Note that AJINGA will only send notices from the following email, and will not ask you to provide any personal data by responding to the message directly. · E-mail: hsbcrecruiting@mail.ajinga.com