The Role

This Managing Director, Business Risk, GCOO role sits within Group Business Risk & Resilience and is accountable for strengthening risk and control management across Shared Services Operations, Procurement and Real Estate Services and GCOO Change Execution. The portfolios supported by this role are significant in scale and materiality. Shared Services Operations manages the Global Capability Network of approximately 65,000 colleagues. Procurement oversees around $15 billion of supplier spend, while Real Estate Services manages an operational portfolio valued at approximately $16 billion across more than 2,000 properties. GCOO Change Execution is accountable for delivering programmes with a combined value of c$310m. Together, these businesses provide critical services, infrastructure, supplier relationships and change delivery that underpin HSBC’s ability to serve customers and operate effectively.

You’ll provide clear and aggregated visibility of the risk profile, shape the Business Risk strategy and ensure governance stays focused on the risks and decisions that matter most. The role advises and brings independent risk expertise to support the GCOO executive leadership team in managing the risks in their business.

The role balances independent challenge with practical business enablement in a fast-moving environment spanning operational resilience, third-party risk and transformation. You’ll drive enterprise remediation where material weaknesses, recurring issues or interconnected risks require coordinated action across business and functional boundaries.

The role has explicit authority to escalate material issues, require appropriate remediation, challenge proposed or existing risk acceptance, and influence investment, supplier, service and change decisions where risk exposure or customer and business outcomes warrant it.

You’ll also provide risk leadership for business issues, ensuring rapid escalation, effective decision-making, impact assessment, remediation and broader lessons learned.

Success means a measurable reduction in material exposures, fewer repeat issues, faster and more sustainable remediation, future ready control design and sustained improvement in customer and business outcomes. You’ll also build capability across an embedded 1LoD team of around 40 colleagues and help create the conditions for a consistent speak up culture.

What you'll be doing

• Define and deliver the Business Risk strategy across Shared Services Operations, Procurement and Real Estate Services and Change Execution in line with Group standards and risk appetite
• Provide a specialist view of risk across the portfolios and advise and challenge GCOO executive leadership on material exposures, emerging themes, interdependencies and required decisions
• Set clear accountability for risk ownership, remediation and sustainable closure across business and functional boundaries
• Drive enterprise remediation of material, recurring or interconnected issues, ensuring robust root cause analysis, clear ownership, appropriate pace and evidence of sustainable resolution
• Exercise decision rights to escalate material issues, require remediation, challenge proposed or existing risk acceptance, and influence investment, supplier, service and change decisions
• Oversee an embedded 1LoD team, strengthening capability, succession and consistent risk management practices across a matrix organisation
• Partner with senior leaders as a trusted adviser and constructive challenger on risk and controls, providing clear visibility of the risk profile and risk appetite decisions
• Represent the 1LoD risk position in governance forums and support engagement with regulators, auditors and key third parties where required
• Maintain a forward-looking view of inherent and residual risks, factoring in internal change and external developments including regulatory expectations
• Identify emerging risks and incident trends early using leading indicators and targeted deep dives to prevent issues rather than only responding to them
• Establish robust control environment reviews and end-to-end control effectiveness activity with clear ownership and measurable control performance
• Own timely remediation of audit, regulatory and internal findings, ensuring strong root cause analysis, transparent escalation and sustainable closure to deadlines
• Lead or coordinate risk input into the management of operational, supplier and change-related issues, including effective escalation, senior stakeholder management, communications and post-incident improvement
• Strengthen risk MI and reporting for senior executives, focusing on key themes, trends material exposures, customer and business impact and the decisions required
• Advance technology enablement and intelligent automation to improve monitoring, evidence capture, workflow and MI while maintaining appropriate governance and data quality
• Track and demonstrate outcomes, including reductions in material risk exposure, improved resilience, fewer repeat incidents, stronger service performance and better customer and business outcomes