# Lead Business Analyst

**Company**: HSBC
**Location**: Guangzhou
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Category**: IT
**Industry**: Finance

**Apply**: https://portal.careers.hsbc.com/careers/job/563774610677563
**Canonical**: https://yubhub.co/jobs/job_417bc97b-b9a

## Description

Some careers have more impact than others. If you're looking for a career where you can make a real impression, join HSBC and discover how valued you'll be.

We are currently seeking an experienced professional to join our team in the role of Lead Business Analyst.

Key Responsibilities:

- Develop, maintain, and implement IT risk management policies, standards, and control frameworks (e.g., ISO27001, NIST, COBIT).

- Conduct regular risk assessments and Control Self-Assessments (CSA) for technology initiatives, infrastructure, and information assets.

- Establish, monitor, and update Key Risk Indicators (KRIs) and Key Controls to ensure operating effectiveness.

- Ensure IT practices comply with local regulations (e.g., HKMA, GDPR, PCI-DSS) and act as a focal point for internal and external audit examinations.

- Lead IT incident investigation, perform root cause analysis (RCA), and ensure prompt rectification of control weaknesses.

- Oversee information security risk management for vendor onboarding and off-boarding.

Requirements:

- Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field.

- 5+ years of relevant experience in technology risk management, IT audit, or IT security within the banking/financial services industry.

- Professional certifications such as CISA, CISSP, CISM, CRISC, or similar are strongly preferred.

- Understanding of IT general controls (ITGC), cybersecurity best practices, data protection, and cloud security principles.

- Familiarity with local financial authority regulations and technical risk management guidelines.

Core Skills:

- Analytical Thinking: Ability to identify and quantify complex technology risks.

- Communication: Excellent interpersonal skills to influence and collaborate with first-line business units and stakeholders.

- Problem-Solving: Proven ability to define and drive the implementation of remediation plans.

- Leadership: Ability to lead IT risk awareness initiatives and work under pressure.

You'll achieve more when you join HSBC. HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment.

## Skills

### Required
- Analytical Thinking
- Communication
- Problem-Solving
- Leadership
- IT General Controls
- Cybersecurity Best Practices
- Data Protection
- Cloud Security Principles
- Local Financial Authority Regulations
- Technical Risk Management Guidelines