Senior Control Manager (CTO Infrastructure – Enablement)

The GCIO Chief Control Office (CCO) team enables the bank to operate within its risk appetite by providing operational risk and control expertise, specialist technical knowledge, and a deep understanding of the businesses and functions served. The team implements and oversees the Group’s Risk Management Framework, conducts ongoing and targeted controls assessments, maintains robust risk governance, and champions a proactive risk culture. GCIO CCO works closely with partners across all lines of defence and maintains positive relationships with regulators and external partners.

• At least 5 years of hands-on experience within IT infrastructure and technology control capabilities either directly or as a 1/2/3LOD control management function.
• At least 5 years of hands-on experience and subject matter expertise in management of operational risk, non-financial risk, and/or technology & cyber risk.
• Experience across Data, IT, Operations, Risk Management, and/or Audit roles requiring management of diverse risk types is desirable.
• Financial Services or other highly regulated industry experience/exposure is preferred.
• Strong communication skills to influence and challenge stakeholders.
• Ability to work independently with limited supervision.
• Ability to present complex issues concisely to senior partners using non-technical language.
• Experience dealing with regulatory bodies engagement.
• Active industry recognized certificates will be an asset, e.g., CISA, CISSP, CRISC, CCSP.

Nice to have:

• CISA
• CISSP

• Partner with the GCIO CCO function to oversee the risk and control portfolio related to the services CCO CTO provides to the Group.
• Be a leader within the GCIO Chief Control Office (GCIO CCO) Function supporting the Technology Infrastructure area of the Chief Technology Office within HSBC.
• Act as trusted advisor for senior management by managing operational risk including risk assessments, control environment, issues management, and audits.
• Promote accountable risk and control decision-making based on quality data and analysis, actively challenging poor, inefficient, or excessive controls.
• Provide specialist risk and control knowledge and insights, leading efforts to continuously improve the control environment and monitoring of risk.
• Advise and design processes and controls in a commercially viable, practical, and effective manner.
• Identify trends to anticipate future developments in the risk and control environment.
• Influence and shape the development and implementation of future-fit risk management and regulatory frameworks.
• Provide Senior Management with updates on relevant changes to policy or projects related to operational risk impacting their area of responsibility.