Senior IT Security Analyst|Cybersecurity

The health and safety of our employees and candidates is very important to us. Due to the current situation related to the Novel Coronavirus (2026-nCoV), we’re leveraging our digital capabilities to ensure we can continue to recruit top talent at the HSBC Group. As your application progresses, you may be asked to use one of our digital tools to help you through your recruitment journey. If so, one of our Resourcing colleagues will explain how our video-interviewing technology will be used throughout the recruitment process and will be on hand to answer any questions you might have.

Some careers shine brighter than others.

If you’re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

HSBC is one of the largest banking and financial services organizations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realize their ambitions.

We are currently seeking an experienced professional to join our team in the role of Senior IT Security Analyst

Job Profile:

Identity and Access Management (IAM) are responsible for providing a best in class service to internal customers, cost effective operational delivery and the provision of an operational platform to support the Global Access Management strategy and future business growth.

IAM supports Global Technology teams in minimising losses to the Bank through inappropriate access to systems, ensuring that HSBC’s electronic based assets are monitored, managed, accessed and protected effectively, so that only those people with a legitimate business need can access or modify them, when they need to do so. This is achieved through an IAM process framework and toolset and by measuring, monitoring and reporting on both adherence to standards and quality of IT service performance.

The role of a Privileged Access Control monitor is to assess as a subject matter expert and report the status to the relevant stakeholders of the HSBC IT estate's compliance to Policy, Standards, and Operational Risk Controls.

Reviewing and progressing Privileged Exceptions, Dispensations and Risk Acceptances requests to the Privileged Access Policy and Standard;
• Exceptions: Review provisions in the standard for not implementing a control (e.g. exceptional circumstances); Ensure authorized approvals are obtained on the exceptions as per the policy.
• Dispensations: Review breaches of the Privileged Access policy and standard; Ensuring privileged access non-compliance is addressed; Reviewing use cases when it is not possible to implement the controls specified in the policy and/or remediation plan exceeds 12 months.
• Risk Acceptances: Review use cases where it is not possible or practical to remediate material risks with significant control weaknesses within 12 months. Review privileged access risks which are accepted, and certify on at least annual basis.
• Provide guidance to stakeholders through the workflow process and providing information on what is required for progressing Privileged Exceptions, Dispensations and Risk Acceptances
• Provide oversight and coordination of Privileged Access work-streams being managed outside of Identity and Access Management.
• Provide subject matter expertise for all matters relating to privileged access.
• Plan and produce guidelines on how privileged access controls can be implemented group wide, to meet the requirements of published standards/policies.
• Work to introduce IAM Non-functional Requirements into the CyberSecurity engagement process.
• Sustain a consistent Privileged access control process globally.

Requirements
• Previous experience working within an IAM function
• Knowledge of Policy and Security Standards within HSBC
• Working in a Risk and/or Control environment
• Proven experience of motivating others to deliver exceptional performance and long terms results
• A flexible and adaptable management style with experience of developing yourself and others
• Both spoken and written communication skills with experience of adapting your style and approach to the audience and message to be delivered
• A track record of making complex business decisions with authority, even in times of ambiguity, considering the potential long term risks and implications
• Experience of creating and deploying comprehensive business/operating plans which consistently deliver desired results
• Drive E2E process reviews and take ownership in completing projects that drive efficiency and customer benefit
• Ensure agreed migrations / re-migrations are effectively implemented in liaison with the Project managers and business managers.
• Evaluate and agree appropriate levels for productivity, quality and learning curve with business units.
• Ensure that issues/problems are fully analyzed and resolved within agreed time scales. Appropriate action is taken to prevent recurrence where necessary. Major issues identified and recorded / reported appropriately.
• Procedural changes / new initiatives are fully communicated to and implemented by the teams under control.
• Develop generic tools / procedures to ensure consistent and accurate completion of scheduled tasks across teams.
• Processing teams consistently maintain a high level of customer service.

You’ll achieve more when you join HSBC.

www.hsbc.com/careers

HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

Issued by – HSBC Software Development India