Senior Control Manager (CTO Infrastructure – Enablement Lead)

The GCIO Chief Control Office (CCO) team enables the bank to operate within its risk appetite by ensuring efficient and effective risk and control management. They provide operational risk and control expertise, specialist technical knowledge, and a deep understanding of the businesses and functions served. Key activities include implementation and oversight of the Group’s Risk Management Framework, ongoing and targeted controls assessments, maintaining robust risk governance, and championing a proactive risk culture. The team works closely with partners across all lines of defence and maintains positive relationships with regulators and external partners.

• At least 5 years of hands-on experience within IT infrastructure and technology control capabilities either directly or as a 1/2/3LOD control management function.
• Previous experience leading teams; remote team leadership experience preferred.
• At least 5 years of hands-on experience and subject matter expertise in management of operational risk, non-financial risk, and/or technology & cyber risk.
• Experience across Data, IT, Risk Management, and/or Audit roles requiring management of diverse risk types is desirable.
• Previous experience identifying, defining, and solving problems impacting work or the wider business.
• Financial Services or other highly regulated industry experience/exposure preferred.
• Strong communication skills to influence and challenge stakeholders.
• Experience dealing with regulatory bodies engagement.
• Active industry recognized certificates are an asset, e.g., CISA, CISSP, CRISC, CCSP.

• Partner with the GCIO CCO function to oversee the risk and control portfolio related to the services CCO CTO provides to the Group.
• Lead a specialist control team within the GCIO Chief Control Office (GCIO CCO) Function supporting the Technology Infrastructure area of the Chief Technology Office within HSBC.
• Manage design of controls for the Bank including Configuration Baselines, Evergreening/Obsolescence, IT Asset Management, Capacity Management, IT service Acceptance, and infrastructure compliance with controls such as Third Party and Cyber requirements.
• Act as trusted advisor for senior management by managing operational risk including risk assessments, control environment, issues management, and audits.
• Promote accountable risk and control decision-making based on quality data and analysis, challenging poor, inefficient or excessive controls and related behaviours.
• Provide specialist risk and control knowledge and insights, leading efforts to improve the control environment and monitoring of risk.
• Advise and design processes and controls in a commercially viable, practical, and effective manner.
• Identify trends to anticipate future developments in the risk and control environment.
• Influence and shape the development and implementation of future-fit risk management and regulatory frameworks.
• Provide Senior Management with updates on relevant changes to policy or projects related to operational risk impacting their area of responsibility.