Some careers have more impact than others.

If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be.

We are currently seeking an experienced professional to join our team in the role of Senior IT Security Analyst Business: Cybersecurity Principal responsibilities Customers / Stakeholders• Report progress and identify and raise any issues/risks, escalating as appropriate to enable satisfactory resolution.• Build trusting relationships with stakeholders by consistently meeting and delivering upon their business needs; demonstrating and being respected foryour domain knowledge.• Deliver fair outcomes for our customers and ensure own conduct maintains the orderly and transparent operation of financial markets.

Those stakeholders include: Supplier management analysts Project managers from IT or the business Cryptography Operations and Cybersecurity Global Defense leadership Leadership & Teamwork Support peers who deliver and maintain the bank’s encryption technology and the projects consuming the services by understanding their needs anddelivering to them.

Ensuring that work happens according to schedule and with minimal deviation from process.

Ensuring that best practices are implemented and help the organisation meet its own and external standards.

Develop and contribute in crypto knowledge objects, procedures, and standard review.

Operational Effectiveness & Control: Act transparently in line with all appropriate standards.

Ensure that the appropriate internal and external standards are complied with and that the risk of cryptographic compromise is minimized at all times.

Liaise with the cryptography team’s internal control function.

Design, implement and maintain internal controls regarding crypto infrastructure and key management.

Plan and execute on project to improve the operational effectiveness The jobholder will ensure the fair treatment of our customers is at the heart of everything we do, both personally and as an organisation.

This will be achieved by consistently displaying the behaviours that form part of the HSBC Values and culture and adhering to HSBC risk policies and procedures, including notification and escalation of any concerns and taking required action in relation to points raised by audit and/or external regulators.

The jobholder is responsible for managing and mitigating operational risks in their day to day operations.

In executing these responsibilities, the Group has adopted risk management and internal control structure referred to as the ‘Three Lines of Defence’.

The jobholder should ensure they understand their position within the Three Lines of Defence, and act accordingly in line with operational risk policy, escalating in a timely manner where they are unsure of actions required.

Through the implementation the Global AML, Sanctions and ABC Policies, supporting Guidance, and Line of Business Procedures the jobholder will make informed decisions in accordance with the core principles of HSBC's Financial Crime Risk Appetite.

The following statement is only for roles with core responsibilities in Operational Risk Management (Risk Owner, Control Owner, Risk Steward, BRCM, and Operational Risk Function The jobholder has responsibility for overseeing and ensuring that Operational risks are managed in accordance with the Group Standards Manual, Risk FIM, & relevant guidelines & standards.

The jobholder should comply with the detailed expectations and responsibilities for their core role in operational risk management through ensuring all actions take account of operational risks, and through using the Operational Risk Management Framework appropriately to manage those risks.

This will be achieved by:• Continuously reassessing risks associated with the role and inherent in the business, taking account of changing economic or market conditions, legal and regulatory requirements, operating procedures and practices, management restructurings, and the impact of new technology.• Ensuring all actions take account of the likelihood of operational risk occurring, addressing areas of concern in conjunction with Risk and relevant line colleagues, and also by ensuring that actions resulting from points raised by internal or external audits, and external regulators, are correctly implemented in a timely fashion.

Requirements Knowledge & Experience / Qualifications -Background understanding in cryptography technologies applicable to financial service companies, cloud security, data security, internet and cyber security.-Prior experiences in IT development, IT services management and system administration a plus.-Minimum professional IT experience: 12 months.-Technical knowledge in one or more of the followings: encryption devices (HSM, software Crypto and Standards), data at rest encryption, data in motion encryption, Unix/Linus platform and scripting, basic programming experience in Java or Python, Cloud (AWS, Azure, GCP), network, database, mainframe,midrange-Working knowledge in collaboration technologies such as Atlassian JIRA, Confluence, MS Team, Sharepoint is necessary.-Prefer Technical certification: PCI QSA, CISA/CISM, CISSP, ITIL or relevant college education.

About HSBC Technology China We develop, implement and support software and IT services and processes that allow HSBC to remain at the forefront of high-quality banking systems.