Ready to strengthen technology and cyber resilience across Hong Kong and AME?
We are currently seeking a high calibre professional to join our team as Director, Resilience Risk Specialist – Technology and Cyber Security, Hong Kong and AME
Why HSBC
HSBC is one of the largest banking and financial services organisations in the world. Guided by our purpose of opening up a world of opportunity, our ambition is to become the world’s most trusted bank globally, putting customers at the heart of everything we do.
The Role
- Resilience risk is HSBC’s ability to continue delivering important business services within agreed impact tolerances during disruption. This role provides independent second-line oversight and challenge of Technology and Cyber Security risk across Hong Kong and the wider AME region, helping limit incident impact and restore services within defined recovery objectives. You’ll partner with senior business and technology stakeholders to assess material risks, incidents and control weaknesses and to ensure timely sustainable remediation within approved risk appetite.
- The role also provides thematic oversight across service availability, recovery capability and resilience testing aligned to regulatory expectations. You’ll escalate significant matters through the appropriate regional and global governance forums and contribute regional insight to the development of Group Resilience Risk priorities. Success looks like clearer decision-making on top and emerging risks, stronger control effectiveness and improved readiness to withstand and recover from disruption.
What you'll be doing
- Implement agreed Group Resilience Risk strategy, frameworks, policies and standards for Technology and Cyber Security risk across Hong Kong and AME, translating them into proportionate local priorities
- Provide independent second-line oversight and constructive challenge across technology resilience, cyber resilience, service availability, recovery capability, resilience testing and associated key controls
- Advise senior leaders on the business impact of issues, incidents and top or emerging risks to inform decisions on controls, investment, resourcing and operating model changes within risk appetite
- Hold risk and control owners accountable for demonstrating effective control design and operation and challenge the timeliness and sustainability of remediation
- Assess material technology and cyber incidents, ensure appropriate root-cause analysis and corrective action and escalate lessons learned across Hong Kong and AME
- Oversee key resilience risk themes including obsolescence, architecture and infrastructure concentration, cloud, third-party and supply-chain risk, data-centre dependencies and material technology change
- Coordinate horizon scanning across regulatory, technology and threat landscapes and translate developments into recommendations and implementation priorities within the global framework
- Strengthen governance and reporting across Hong Kong and AME including risk appetite, top and emerging risks, risk profile reporting and relevant committee or Board reporting
- Support regulatory and audit engagement in coordination with Regulatory Compliance, Legal and local management and oversee timely closure of relevant findings
- Build regional capability through guidance, coaching and knowledge sharing to strengthen Technology and Cyber Security risk awareness, accountability and execution
What we're looking for
- Bring significant risk management experience within a globally significant financial institution including second-line oversight in a complex matrix organisation
- Demonstrate strong knowledge of Hong Kong’s banking, technology, cyber security and operational resilience environment and relevant regulatory expectations
- Apply global risk frameworks across multiple AME jurisdictions while balancing consistency with local legal-entity and regulatory obligations
- Show deep Technology and Cyber Security expertise across resilience, service availability and recovery, resilience testing, key controls, obsolescence, architecture, infrastructure concentration, cloud and third-party risk
- Assess the business and customer impact of technology and cyber risks across financial-services business models, products and critical services
- Evaluate material incidents, control weaknesses and change programmes and provide clear independent opinion and constructive challenge
- Coordinate effective engagement with regulators, auditors and senior stakeholders through appropriate internal functions and governance
- Influence senior stakeholders across country and regional teams including CROs, CIOs, CISOs, technology leaders and control owners
- Translate strategy and policy into effective regional and local implementation, measurable outcomes and timely escalation
- Bring relevant qualifications, certificates or equivalent demonstrable experience in technology, cyber security or resilience risk
Oversight that protects critical services
This role sits at the intersection of technology, cyber security and operational resilience where decisions shape service integrity and availability. You’ll provide independent oversight that helps teams anticipate disruption, contain impact and restore services within agreed objectives. The work spans Hong Kong and the wider AME region with regular engagement across senior governance forums. If you want to strengthen how a major global bank manages technology and cyber resilience risk at scale, this role offers the scope to make that impact.
Opening up a world of opportunity
http://www.hsbc.com/careers
HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.
Issued by The Hongkong and Shanghai Banking Corporation Limited.
