# Senior Associate Director Control Office Specialist

**Company**: GCIO
**Location**: Guangzhou, Guangdong
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Finance

**Apply**: https://portal.careers.hsbc.com/careers/job/563774612594585?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/senior-associate-director-control-office-743fbfb9-ed6/

## Description

Join HSBC as a Senior Associate Director Control Office Specialist in Guangzhou, Guangdong, China. As a valued member of our team, you will play a critical role in driving a proactive risk culture, shifting focus from remediation to prevention through thematic reviews and departmental training.

**Principal Responsibilities:**

- Drive a proactive risk culture, shifting focus from remediation to prevention through thematic reviews and departmental training.

- Support departmental external Assurance obligations, including ISAE 3402.

- Consult on projects, providing subject matter expertise during audits.

- Share best practices with the CIB Risk and Control Organisation.

- Provide training sessions for key staff to uplift risk awareness.

- Provide guidance and help to delivery teams regarding security solutions to enable faster delivery of Systems.

- Collaborate with project teams working closely in a DevOps and agile development processes.

- Partner with the CIB business areas and Risk Functions to promote and provide guidance to relevant policies, standards, and governance within CIB.

- Provide regional stakeholder updates with respect to Control uplift programs.

- Support engagement with internal/external/client audit and Regulatory Exams, including oversight of field work, collation of artefacts, and partnership with CCO to remediate issues.

- Attend relevant regional governance forums and provide appropriate MI.

- Communicate residual risk through reporting, business governance processes, and forums.

- Own the risk & control agenda for the region.

- Lead the delivery of risk & control projects and programmes for the region.

- Assist service/project owners in responding appropriately and effectively to firm-wide risk, cyber, and corporate control initiatives.

- Partner with service owners and Asset Class RCOs to identify and assess controls, determine mitigating actions and remediation activities, and understand the overall risk profile.

- Advocate and support initiatives to improve accuracy across all Enterprise Golden Source data repositories.

- Provide visibility of status of action plans and external/internal audit issues.

- Drive ownership and accountability for Risk Issue and Action Plan Ownership within the region.

- Challenge decisions made on control implementation.

- Review allocation of issues to SSV sectors and agree categorization of high/medium/low.

- Approve the raising and closure of regional IT issues, action plans, but look to automate process.

- Fulfil DBIRO responsibilities for the region.

- Advocate security policies and standards to the respective region.

- Integrate into the development process, attending scrums and owning security use cases and stories.

- Support initial risk assessment process and providing consultancy and guidance.

- Support key CIB security uplift initiatives.

- Contribute to review of security standards and procedures.

**Knowledge & Experience/Qualifications:**

- Proven experience in technology risk and controls within a complex, regulated environment.

- Strong background in third-party risk management, including oversight of internal service agreements and associated controls/monitoring.

- Demonstrated ability to manage and influence stakeholders up to executive level.

- Extensive client-facing experience, including due diligence, assurance, and audit activities.

- Excellent presentation and communication skills, with the ability to convey complex risk topics to diverse audiences.

- Experience acting as a deputy or second-in-command within a risk, assurance, or due diligence function is highly desirable.

- Influencing skills.

- Stakeholder management.

- General interest in Technology, including awareness of trends.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- technology risk
- controls
- third-party risk management
- stakeholder management
- influencing skills
- communication skills

### Nice to have
- consulting
- auditing
- risk assessment
- security policies
- standards

---

Source: [Apply at portal.careers.hsbc.com](https://portal.careers.hsbc.com/careers/job/563774612594585?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)