HSBC
Global Head of Cybersecurity Resilience
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Why HSBC
HSBC is one of the largest banking and financial services organisations in the world. Guided by our purpose of opening up a world of opportunity, our ambition is to become the world’s most trusted bank globally, putting customers at the heart of everything we do.
The Role
The Global Head of Cybersecurity Resilience sets and executes HSBC’s enterprise-wide cybersecurity resilience strategy and roadmap. Working across Cybersecurity, GCIO, GCOO and Global Businesses and Functions the role helps ensure HSBC can prepare for, withstand, respond to and recover from cyber disruption. This includes establishing minimum cyber capabilities needed to maintain critical operations during severe disruption and resolution scenarios and translating strategy into measurable run and change activity. The role shapes resilience risk governance, reporting and remediation tracking and strengthens resilience culture and accountability across a global matrixed organisation. It also maintains effective relationships with regulators and external partners and represents Cyber Resilience Strategy & Execution (RSE) in senior forums. Success means clearer ownership across resilience domains, stronger recovery capability and demonstrable improvements through testing, exercising and remediation.
What you'll be doing
- Own and execute HSBC’s enterprise-wide cybersecurity resilience strategy, target state and roadmap
- Establish minimum cyber capabilities required to maintain critical operations during severe disruption and resolution scenarios
- Clarify accountability and interfaces across Cybersecurity, technology resilience and operational resilience
- Enable cyber recovery, technology resilience and disaster recovery including dependency mapping across critical services and suppliers
- Oversee scenario testing, exercising and recovery validation ensuring findings translate into measurable improvement
- Govern resilience risk reporting, management information, remediation tracking and timely escalation of material gaps
- Direct third-party and supply-chain cybersecurity resilience including proportionate requirements, assurance and remediation for key suppliers
- Build team strategy and oversee delivery for a cybersecurity resilience team of up to 12 across UK, Europe and Asia including delegated multi-million budget responsibility
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we're looking for
- Bring significant senior experience in cybersecurity resilience, cyber risk, technology resilience, operational resilience or related leadership roles
- Demonstrate proven experience shaping enterprise-wide cybersecurity resilience strategy and complex change in a global matrixed organisation
- Show hands-on capability in cyber recovery, technology resilience, operational continuity and recovery testing, exercising and validation
- Evidence experience defining minimum capabilities needed to sustain critical operations during severe disruption or resolution scenarios
- Apply strong knowledge of resilience risk management, control environments, remediation governance, reporting and escalation
- Demonstrate experience managing third-party and supply-chain cybersecurity resilience and complex technology dependencies
- Partner effectively with regulators, internal audit, second-line risk, compliance, legal and senior business stakeholders
- Hold CRISC, CBCI, CISM, CISSP or equivalent certification, or bring equivalent demonstrable experience in these domains
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Building HSBC’s cyber recovery capability
This role sits at the point where strategy becomes real recovery capability across a complex global organisation. The work will shape how critical operations are protected and restored under severe disruption and how resilience risks and dependencies are governed and remediated. If you want to set direction across Cybersecurity, technology resilience and operational resilience and see measurable improvements through testing and delivery this role offers the scope to do it at enterprise scale. You’ll also help develop future-fit capabilities and strengthen collaboration across teams that keep the bank running for customers when it matters most.
Being open to different points of view is important for our business and the communities we serve. At HSBC, we’re dedicated to creating diverse and inclusive workplaces - no matter their gender, ethnicity, disability, religion, sexual orientation, socio-economic background or age. We are committed to removing barriers and ensuring careers at HSBC are inclusive and accessible for everyone to be at their best. We take pride in being a Disability Confident Leader and will offer an interview to people with disabilities, long term conditions or neurodivergent candidates who meet the minimum criteria for the role.
If you have a need that requires accommodations or changes during the recruitment process, please get in touch with our Recruitment Helpdesk via hsbc.recruitment@hsbc.com.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London