Cryptography Control Owner

HSBC Service Delivery is part of a global banking group providing technology and cybersecurity services to support international banking operations. The cybersecurity function includes multiple specialized teams working to defend the bank against evolving threats and ensure compliance with regulations.

• Deep understanding of technology, preferably in cryptography, or willingness to quickly build knowledge.
• Strong communication skills to explain complex technical information to non-technical stakeholders and senior management.
• Ability to collaborate effectively with cross-functional teams including cybersecurity and business units.
• Skilled in managing relationships with business units, audit, and regulatory bodies.
• Problem-solving skills to identify and remediate governance process challenges, with support from Cryptography Capability Lead.

• Provide the first line of defense for all matters relating to Cryptography controls and drive implementation to protect key data.
• Maintain accuracy and alignment of cryptography controls with the bank's Risk Control framework.
• Design controls and continuously monitor their effectiveness, managing performance metrics.
• Ensure cryptography controls comply with relevant regulations, standards, and audit requirements.
• Engage with 2LoD/3LoD stakeholders, responding to control queries, reviews, and challenges.
• Foster collaboration and knowledge sharing across all Control Owners in Global Defense.
• Develop and deliver training and awareness programs on the cryptography control strategy.

Applicants must include a specific consent statement regarding personal data processing as per GDPR. The administrator of personal data is HSBC with headquarters in Kraków. Candidates have rights to access, rectify, delete, or restrict processing of their data and to withdraw consent at any time. Data will be processed for recruitment purposes and may be shared with Just Join IT and other entities involved in recruitment. Withdrawal from the recruitment process can be communicated via email.