Global Head of Cryptographic Services NEW

HSBC

Our Technology teams work closely with HSBC’s Global Businesses and Markets to design, build and run digital services that allow millions of our customers around the world to bank quickly, simply and securely. We run and manage Technology infrastructure, datacentres and core banking systems that power the world’s leading international bank, with one of the largest technology estates in the industry.

We are looking for a Cybersecurity leader to join us to shape our long-term strategy, and turbo-charge delivery, as the accountable owner for Cryptography across the bank. This senior role reports directly into the Global Head of Cyber Technology & Engineering.

What you will be doing

• Strategy: Define and maintain our global strategy for Cryptography, supported by engineers, architects and multiple Control Owners, enabling business success, meeting regulatory expectation and best practise, whilst responding to current and likely threat actor evolution. Includes advancing pattern maturity, building engineering platform products for low friction consumption such as HSM-as-a-Service, CBoM, data analytics, modernising our estate architecture and operation, and driving our post-quantum future today.
• Delivery: Own the investment roadmap for Cryptography and its successful delivery across multiple partners. Ensure the transparent prioritisation of a common backlog to drive risk reduction, simplification and wider strategic needs. Ensure risk-risk trade-offs are managed, particularly risk mitigation and operational needs.
• Innovation: Empower HSBC to successfully navigate cyber risk with innovative, responsive and frictionless technologies and services, both those delivered in-house and from external partners. Foster and empower a culture of innovation, experimentation, and continuous improvement.
• Partnership: Form close partnerships with engineering teams: as design partners – for how capabilities will be implemented, at times in novel ways; as customers – understanding their needs as they consume cryptographic services or implement mandates, and as delivery partners – prioritising change within the Cryptography Engineering team, and to drive bank-wide adoption of uplifts. Partner with external technology providers and security specialists to integrate best practice and leverage or build cutting-edge tooling.
• Services: operate and mature a consistent and high quality centralised cryptographic operations service, and in partnership with the service delivery team similarly deliver am enabling business consulting service.
• Oversight: Ensure Cryptography is overseen end-to-end, robustly and throughout the organisation: from software development, federated operation through to the protocol demise. Drive a data-centric approach to observability and assessment, wherever possible supported by automation, measures and analytics.
• Accountability: Ensure regulatory and risk management outcomes are being maintained or robustly managed. Ownership of High-Risk Audit, Regulator and self-identified issues. Ownership of the capability budget, balancing run and change investment. As a senior leader, contribute to and champion change across both Cybersecurity and Technology, occasionally outside of your primary remit.
• Talent: Lead, manage, invest in, recruit and inspire a team of highly skilled and performant SMEs across the globe. A culture driven by empowerment, experimentation, learning, partnership and delivery. A place where colleagues thrive, solving meaningful problems that keep the bank and its customers safe.

What you will bring to the role

Successful candidates have proven skills and experience similar to the below:

• Mindset
  • An inquisitive approach, always asking how to achieve goals in a smarter and more effective way.
  • An ability and interest to learn and experiment with new approaches to achieve business and cybersecurity outcomes, in different and often challenge contexts.
• Possess strong leadership skills to bring out the best in a team. This includes both direct leadership and cross-functional capabilities.
• Experience within fast-moving, complex and demanding corporate environments and able to provide appropriate direction to the team whilst dealing with ambiguity and change.
• Act as a role-model for more junior members of Cybersecurity and Technology.
• Mature stakeholder management and communications skills
  • Ability to engage with and influence senior peers and leadership.
  • Managing, developing and retaining high-performing individuals in different geographies, often remotely.
  • Proven ability to collaborate across industry, academia and government to solve complex problems.
  • Ability to prepare concise presentations, reports and updates for senior management.
• Deep Technical background
  • Expert knowledge of Cryptography including PKI, key management, algorithms, protocols, and attacks.
  • Robust understanding of common industry cyber security frameworks, standards, and methodologies, including PCI DSS, FFIEC guidelines, CIS and NIST standards.
  • Strong analytical skills to identify and resolve complex problems, often with risk-risk trade-offs.
  • Strong engineering background in a hands-on or leadership role.
  • Proven experience in technology leadership roles, running high performing technology teams.
  • Proven experience working in a large scale, multi-national and technologically diverse environments.
  • Prior experience of Financial Institutions is not required.
• Strong Risk and Controls understanding
  • Knowledge and exposure of the application of Risk and Control Management and associated frameworks, preferably from a multi-market institution.
  • Ability to articulate technical threats, scenarios, controls and risks to both technical and business stakeholders.
• Effective Interpersonal Skills
  • Influential, credible and persuasive, active listener, embraces HSBC Values, shows good judgement and demonstrates high level of communication skills to achieve effective

This role is based in UK – in either our London or Sheffield offices. Some travel to other sites will be required

Being open to different points of view is important for our business and the communities we serve. At HSBC, we’re dedicated to creating diverse and inclusive workplaces – no matter their gender, ethnicity, disability, religion, sexual orientation, or age. Wearecommittedto removing barriers and ensuring careersatHSBCareinclusiveandaccessible for everyone to be at their best.

Ifyouhaveaneedthatrequiresaccommodationsor changes duringtherecruitmentprocess, please get in touch with our Recruitment Helpdesk: