Main Responsibilities and Key Deliverables:
Provide security consultancy on specialist strategic topics
Work closely with vendors, platform teams and subject matter experts (SMEs) where necessary in order to drive out architectural decisions, design statements and exceptions.
Take the lead on solving security challenges and issues where the problem scenario is not covered by a pattern, standard or existing strategy.
Surface strategic and architectural decisions through the approved governance or oversight channels as defined by the banks operating model.
Where embedded within a project, act as a primary resource ensuring commitment to attend all appropriate calls and meetings in order to provide the level of support required.
Acts as a buffer between the speed of continuous integration and the need for strategic security and managing overall business and security risks
Act as the first point of contact for IT Security questions and queries
Participate in IT Security engagement activities (e.g. risk assessment and threat modelling sessions,
security risk review etc.);
Identify security risks as they arise, communicate it as appropriate and ensure relevant stakeholders are involved for the adequate mitigation or remediation
Provide guidance to the teams and stakeholders of IT Security by referring to policies and standards
Promote the adoption of security tooling in line with the development lifecycle and HSBC approved toolset;
Identify and make recommendations geared at increasing teams velocity through self-sufficiency in terms of IT Security
Educate teams in terms of their security capabilities
Identify, engage and establish relationships with key stakeholders
Assess Dev team IT Security profile, controls, and level of engagement
Provide advice and guidance to relevant stakeholders about the IT Security engagement model improvement