Cryptography Control Owner

HSBC Technology Poland is part of HSBC, one of the largest banking and financial services organisations globally, operating in 64 countries. The technology teams design and build digital services and manage IT infrastructure, including cybersecurity functions that defend against a wide range of threats. The Global Defense - Cybersecurity Engineering and Operations function includes multiple teams working together to address risks and innovate in cybersecurity.

• Deep understanding of technology, preferably in Cryptography, or willingness to quickly build knowledge.
• Strong communication skills to explain complex technical information to non-technical stakeholders and senior management.
• Ability to work effectively with cross-functional teams including Cybersecurity and business units.
• Stakeholder management skills to maintain relationships with business units and audit/regulatory bodies.
• Problem-solving skills to identify and remediate governance process challenges with technical consultancy support.

• Provide the first line of defense (1LOD) for all matters relating to Cryptography controls.
• Drive implementation of controls to protect the group’s key data.
• Maintain accuracy and alignment of the CRYP control to the bank’s Risk Control framework.
• Design controls and perform continuous control monitoring, including managing performance metrics (KCIs).
• Ensure cryptography controls align with relevant regulations, standards, and best practices.
• Support compliance efforts and timely implementation of audit points and regulatory issues.
• Engage with 2LoD/3LoD stakeholders, respond to control queries, and collaborate with senior stakeholders including business units, audit, and regulators.
• Foster collaboration and knowledge sharing across all Control Owners in Global Defense.
• Develop and deliver training and awareness programs on the Cryptography control strategy.