CIB Head of Cyber Engineering Practices
HSBC London, England, United Kingdom
Financial Services · 10,001+ employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
This role involves embedding cyber controls and security frameworks into CIB engineering practices across the product lifecycle. You will lead a team of technical experts to provide security guidance, threat modeling, and remediation strategies for critical technology platforms.
What they look for
Requirements
The candidate must have substantial experience in cybersecurity architecture and technical engineering within large, complex organizations. Proven expertise in security frameworks like NIST and ISO 27001, along with relevant certifications such as CISSP or CCSP, is required.
Full description
Ready to embed cyber controls into CIB engineering at speed and scale?
Why HSBC
HSBC is one of the largest banking and financial services organisations in the world. Guided by our purpose of opening up a world of opportunity, our ambition is to become the world’s most trusted bank globally, putting customers at the heart of everything we do.
The Role
CIB Chief Information Security Office supports CIB business priorities by ensuring major changes and initiatives get the right cyber advice and guidance from the start. This Director level role shapes how cyber threat modelling, security assessment and remediation are embedded across the product lifecycle and into operations - especially as Frontier AI changes the technology and control landscape. You’ll oversee a small team of technical experts working side-by-side with CIB engineers including principal engineers and platform owners. The focus is practical execution in real time - showing what good looks like through proofs of concept, platform integration guidance, targeted testing and peer review. Success means measurable risk reduction and stronger control adoption across CIB engineering without slowing delivery.
What you'll be doing
- Set and evolve AI security controls and frameworks across Technology and Cyber as the landscape develops
- Develop and maintain secure architecture frameworks across cloud, on-premises and hybrid environments aligned to risk appetite and standards such as NIST and ISO 27001
- Oversee engineering and integration of security controls across identity and access management, network security, endpoint protection and data security
- Embed secure-by-design principles and champion automation across security engineering practices
- Shape secure design and operation of critical technology platforms with platform owners and engineering teams across the full lifecycle
- Provide technical oversight for incident response, threat detection and vulnerability management
- Direct root cause analysis and remediation for complex security incidents
- Act as a trusted advisor to technology and business leaders translating cyber risk into clear actionable recommendations
What we're looking for
- Bring substantial experience in cybersecurity architecture, technical engineering and platform security within large complex organisations
- Apply strong engineering capability in agile product teams with an emphasis on iterative improvement and risk reduction
- Demonstrate deep knowledge of security frameworks such as NIST and ISO 27001 and secure software development practices
- Show proven delivery of security controls and solutions at scale across modern technology estates
- Apply strong technical expertise across network security, identity management, cryptography and automation
- Provide experience overseeing technical teams and coordinating delivery across cross-functional initiatives
- Hold CISSP, CCSP, SABSA, AWS/Azure Security or equivalent certification or bring equivalent demonstrable experience
- Communicate technical topics clearly to technical and non-technical audiences and influence stakeholders at all levels
Embedding Security into Engineering
This role puts you at the centre of how CIB builds and runs secure technology - from architecture decisions to code-level controls and operational resilience. You’ll work in close partnership with engineering teams to turn security intent into working solutions that reduce risk across the lifecycle. If you want to shape practical AI security and strengthen platform security at scale this role offers the remit and proximity to make it happen. Apply to help set the standard for what good looks like across CIB engineering.
Being open to different points of view is important for our business and the communities we serve. At HSBC, we’re dedicated to creating diverse and inclusive workplaces - no matter their gender, ethnicity, disability, religion, sexual orientation, socio-economic background or age. We are committed to removing barriers and ensuring careers at HSBC are inclusive and accessible for everyone to be at their best. We take pride in being a Disability Confident Leader and will offer an interview to people with disabilities, long term conditions or neurodivergent candidates who meet the minimum criteria for the role.
If you have a need that requires accommodations or changes during the recruitment process, please get in touch with our Recruitment Helpdesk via hsbc.recruitment@hsbc.com.