Wpb Risk and Control Officer

**Some careers have more impact than others.**

If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be.

HSBC is one of the largest banking and financial services organizations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realize their ambitions. We are currently seeking an experienced professional to join our team in the role of **WPB Risk and Control Officer (Resilience Risk)**

**Why join us?**

Wealth and Personal Banking serves more than 50 million customers worldwide with a complete range of banking and wealth management services to enable them to manage their finances and protect and build their financial futures. It is a global business that brings together management responsibility for Retail Banking, Wealth Management, Insurance and Asset Management with a focus on customer-centric propositions and innovative and efficient distribution channels

**The Opportunity**:
The Chief Control Office (CCO) plays an important role in enabling the bank to operate within its risk appetite, by ensuring efficient and effective risk and control management.

The CCO achieves this by providing operational risk and control expertise, conducting high quality reviews of the bank's control environment, conducting end to end control assurance reviews on key controls, maintaining robust risk governance focused on material risk and issues, and evolving a culture of continuous and consistent risk management.

**What you’ll do**:

- Support the business with identification of and management of their Information Security issues and risks that are specific to their line of business/function.
- Assist in the proactive monitoring of Business-owned TCS and Data controls that will be used to measure control effectiveness and raise potential issues/actions.
- Engage business/department management to ensure ownership and remediation of internal/external audit and regulatory findings pertaining to TCS Risk and Data Risk.
- Participate in resolving Data Loss Incidents and performing root cause analysis.
- Manage the Phishing Dashboard and create local communication and guidelines to supplement Global/Regional communications on cyber awareness and training.
- Provide proactive Information Security guidance to business teams on new or existing business projects and initiatives (i.e. Third Party Security Reviews, Application Security Assessments, Cloud Risk Assessments, etc.).
- Assist the Business or Function in identifying their End User Computing (EUC) systems, and assessing the risks associated with the use and management of the EUC’s.
- Monitor Endpoint Exception Access requests and provide guidance to business teams in managing the associated risks.
- Assist the Business Risk and Control team to perform the Risk and Control Assessment (RCA) for TCS and Data on a periodic basis. This includes reviewing Trigger Events on a continuous basis to determine whether the RCAs for TCS and Data need to be re-assessed.

Requirements

**What you will need to succeed in the role**:

- Degree in business or qualification in a technology-related field required.
- Positive and professional attitude, team player, flexible and adaptable, open to change(s).
- Ability to quickly develop good working relationships with stakeholders.
- Good spoken and written communication and ability to adapt style based on audience (Fluent in spoken / written English).
- Ability to work in a small yet fast-paced and energetic team, and build out internal processes and capabilities.
- Experience in either a combination of risk management, cyber security and IT job roles.

**What additional skills will be good to have?**_ _**
- Professional security management certification is desirable but not mandatory (e.g. CISSP, CISM, CISA, CRISC, etc).
- Knowledge of common information security management frameworks and best practices (e.g. ISO/IEC 27001, GASSP, NIST etc) is desired but not mandatory.

**You’ll achieve more at HSBC**

**Issued By HSBC Electronic Data Processing (India) Private LTD