Role Title

Senior IT Security Analyst / Consultant Specialist

Location:

India

Grade (GCB or equivalent)

GCB 6 / GCB 5

Are you looking for an opportunity to advance your tech career? Interested in creating next-generation cybersecurity capabilities? If so, consider applying to join HSBC's Cybersecurity Technology and Engineering (CTE) team.

Cybersecurity Technology and Engineering at HSBC is responsible for deploying solutions that defend the organisation, its customers, clients, partners, and staff against a wide range of threats. Working collaboratively with partner teams across HSBC, we implement cutting-edge defensive capabilities that are both effective and adaptable in a constantly evolving threat landscape. Guided by our vision-to enable HSBC to be safely successful everywhere the firm chooses to do business-our function is central to the bank's commitment to security.

Role Purpose

The Senior IT Security Analyst / Consultant Specialist will form part of the CTE Cryptography, joining a global team of peers from diverse backgrounds that manages the encryption technology and key material protecting, validating, and assuring critical functions and billions of dollars-worth of transactions across the organization. Due to dynamic and varying demands, the team acts as an essential interface between IT and the broader business, ensuring seamless collaboration and support. This function is responsible for helping to define HSBC Group's cybersecurity posture and deliver global cryptographic best practices and services.

The position is delivering and supporting governance, audit, compliance and regulatory requirements, MI/reporting and management of all (Cryptography) Cybersecurity standards, requiring knowledge of Cybersecurity (Knowledge of cryptography is desirable)



and understanding of PKI, CKMS, Key Management in Cloud.

The ideal candidate will possess strong technical skills, an eagerness to learn, a keen interest in cybersecurity, the ability to work collaboratively in a fast-paced environment, and an aptitude for picking up new tools and techniques on the job, building on existing skillsets as a foundation.

Responsibilities:

CTE Team/function related

- Support and be involved in CRYP agenda and oversee effectiveness of controls to ensure compliance with HSBC Information Security policies and standards

Role specific

- Conduct application risk assessments around implementation of CRYP Controls

- Monitor, report and identify progress on projects raising any issues/risks, escalating as appropriate to management and wider business management functions>

- Identify and report non-compliance to the Cryptography Standards pertaining to encryption, key management, PKI

- Support close co-ordination with the Cybersecurity Second Line of Defense Functions so that risk management processes remain fully aligned to the rest of the organization

Seniority specific

- Takes ownership of deliverables and leads small initiatives or projects, ensuring quality, timeliness, and alignment with business objectives and established best practices, while considering the broader business impact.

- Applies expertise and in-depth knowledge to address routine challenges,



resolve moderately complex issues, and proactively identify opportunities for process enhancement and continuous improvement.

- Collaborates effectively with peers and stakeholders, sharing insights, supporting colleagues with technical expertise, and fostering a diverse, inclusive team culture.

Stakeholders' interactions related

- Drive risk remediation across the global business and functions

- Build trusting relationships with stakeholders by consistently meeting and delivering upon their business needs; demonstrating and being respected for your domain knowledge

Required Skills

The successful candidate will possess skills and experience within one or more of the following areas and demonstrate a willingness to learn additional skills via certification and/or on-the-job learning where required.

Experience

- Experience in Vulnerability management, IT Security compliance, Data Security

- Working experience on Vulnerability Management Tool set i.e., Kenna, Nessus, etc.

- Experienced in dealing with Internal and External auditors and reporting

Education, Qualifications and Certifications

- Industry Standard Certifications such as CISSP; CISA; CISM; CCSP are desirable

Technical skills

- Cybersecurity, Vulnerability management, Cryptography

- KCI/KPI Risk reporting background

- Operational effectiveness - delivers solutions that align to approved design patterns and security, risk and regulatory standards

- A track record of constantly looking for ways to do things better and an excellent understanding of the mechanism necessary to successfully implement change

- Proactively interact with and provide support to delivery partners to ensure the needs of the business are met

📌 PKI - Certificate Management Cybersecurity Analysis (India)
🏢 Objectwin Technology India
📍 India