Global Head of Cybersecurity Resilience

Ready to strengthen HSBC’s ability to recover from cyber disruption?

Why HSBC

HSBC is one of the largest banking and financial services organisations in the world. Guided by our purpose of opening up a world of opportunity, our ambition is to become the world’s most trusted bank globally, putting customers at the heart of everything we do.

The Role

The Global Head of Cybersecurity Resilience sets and executes HSBC’s enterprise-wide cybersecurity resilience strategy and roadmap. Working across Cybersecurity, GCIO, GCOO and Global Businesses and Functions the role helps ensure HSBC can prepare for, withstand, respond to and recover from cyber disruption. This includes establishing minimum cyber capabilities needed to maintain critical operations during severe disruption and resolution scenarios and translating strategy into measurable run and change activity. The role shapes resilience risk governance, reporting and remediation tracking and strengthens resilience culture and accountability across a global matrixed organisation. It also maintains effective relationships with regulators and external partners and represents Cyber Resilience Strategy & Execution (RSE) in senior forums. Success means clearer ownership across resilience domains, stronger recovery capability and demonstrable improvements through testing, exercising and remediation.

What you'll be doing

• Own and execute HSBC’s enterprise-wide cybersecurity resilience strategy, target state and roadmap
• Establish minimum cyber capabilities required to maintain critical operations during severe disruption and resolution scenarios
• Clarify accountability and interfaces across Cybersecurity, technology resilience and operational resilience
• Enable cyber recovery, technology resilience and disaster recovery including dependency mapping across critical services and suppliers
• Oversee scenario testing, exercising and recovery validation ensuring findings translate into measurable improvement
• Govern resilience risk reporting, management information, remediation tracking and timely escalation of material gaps
• Direct third-party and supply-chain cybersecurity resilience including proportionate requirements, assurance and remediation for key suppliers
• Build team strategy and oversee delivery for a cybersecurity resilience team of up to 12 across UK, Europe and Asia including delegated multi-million budget responsibility

What we're looking for

• Bring significant senior experience in cybersecurity resilience, cyber risk, technology resilience, operational resilience or related leadership roles
• Demonstrate proven experience shaping enterprise-wide cybersecurity resilience strategy and complex change in a global matrixed organisation
• Show hands-on capability in cyber recovery, technology resilience, operational continuity and recovery testing, exercising and validation
• Evidence experience defining minimum capabilities needed to sustain critical operations during severe disruption or resolution scenarios
• Apply strong knowledge of resilience risk management, control environments, remediation governance, reporting and escalation
• Demonstrate experience managing third-party and supply-chain cybersecurity resilience and complex technology dependencies
• Partner effectively with regulators, internal audit, second-line risk, compliance, legal and senior business stakeholders
• Hold CRISC, CBCI, CISM, CISSP or equivalent certification, or bring equivalent demonstrable experience in these domains

Building HSBC’s cyber recovery capability

This role sits at the point where strategy becomes real recovery capability across a complex global organisation. The work will shape how critical operations are protected and restored under severe disruption and how resilience risks and dependencies are governed and remediated. If you want to set direction across Cybersecurity, technology resilience and operational resilience and see measurable improvements through testing and delivery this role offers the scope to do it at enterprise scale. You’ll also help develop future-fit capabilities and strengthen collaboration across teams that keep the bank running for customers when it matters most.

Being open to different points of view is important for our business and the communities we serve. At HSBC, we’re dedicated to creating diverse and inclusive workplaces - no matter their gender, ethnicity, disability, religion, sexual orientation, socio-economic background or age. We are committed to removing barriers and ensuring careers at HSBC are inclusive and accessible for everyone to be at their best. We take pride in being a Disability Confident Leader and will offer an interview to people with disabilities, long term conditions or neurodivergent candidates who meet the minimum criteria for the role.

If you have a need that requires accommodations or changes during the recruitment process, please get in touch with our Recruitment Helpdesk via hsbc.recruitment@hsbc.com.