Senior Associate Director Control Office Specialist

Join HSBC as a Senior Associate Director Control Office Specialist in Guangzhou, Guangdong, China. As a valued member of our team, you will play a critical role in driving a proactive risk culture, shifting focus from remediation to prevention through thematic reviews and departmental training.

Principal Responsibilities:

• Drive a proactive risk culture, shifting focus from remediation to prevention through thematic reviews and departmental training.
• Support departmental external Assurance obligations, including ISAE 3402.
• Consult on projects, providing subject matter expertise during audits.
• Share best practices with the CIB Risk and Control Organisation.
• Provide training sessions for key staff to uplift risk awareness.
• Provide guidance and help to delivery teams regarding security solutions to enable faster delivery of Systems.
• Collaborate with project teams working closely in a DevOps and agile development processes.
• Partner with the CIB business areas and Risk Functions to promote and provide guidance to relevant policies, standards, and governance within CIB.
• Provide regional stakeholder updates with respect to Control uplift programs.
• Support engagement with internal/external/client audit and Regulatory Exams, including oversight of field work, collation of artefacts, and partnership with CCO to remediate issues.
• Attend relevant regional governance forums and provide appropriate MI.
• Communicate residual risk through reporting, business governance processes, and forums.
• Own the risk & control agenda for the region.
• Lead the delivery of risk & control projects and programmes for the region.
• Assist service/project owners in responding appropriately and effectively to firm-wide risk, cyber, and corporate control initiatives.
• Partner with service owners and Asset Class RCOs to identify and assess controls, determine mitigating actions and remediation activities, and understand the overall risk profile.
• Advocate and support initiatives to improve accuracy across all Enterprise Golden Source data repositories.
• Provide visibility of status of action plans and external/internal audit issues.
• Drive ownership and accountability for Risk Issue and Action Plan Ownership within the region.
• Challenge decisions made on control implementation.
• Review allocation of issues to SSV sectors and agree categorization of high/medium/low.
• Approve the raising and closure of regional IT issues, action plans, but look to automate process.
• Fulfil DBIRO responsibilities for the region.
• Advocate security policies and standards to the respective region.
• Integrate into the development process, attending scrums and owning security use cases and stories.
• Support initial risk assessment process and providing consultancy and guidance.
• Support key CIB security uplift initiatives.
• Contribute to review of security standards and procedures.

Knowledge & Experience/Qualifications:

• Proven experience in technology risk and controls within a complex, regulated environment.
• Strong background in third-party risk management, including oversight of internal service agreements and associated controls/monitoring.
• Demonstrated ability to manage and influence stakeholders up to executive level.
• Extensive client-facing experience, including due diligence, assurance, and audit activities.
• Excellent presentation and communication skills, with the ability to convey complex risk topics to diverse audiences.
• Experience acting as a deputy or second-in-command within a risk, assurance, or due diligence function is highly desirable.
• Influencing skills.
• Stakeholder management.
• General interest in Technology, including awareness of trends.