# Senior Analyst

**Company**: GCIO
**Location**: Guangzhou, Guangdong
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Finance

**Apply**: https://portal.careers.hsbc.com/careers/job/563774612562633?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_ce666cc4-db8

## Description

We are currently seeking an experienced professional to join our team in the role of Senior Business Analyst in Cybersecurity.

Principal responsibilities:

- Deliver security research and testing projects focused on HSBC critical services and projects to ensure that design, quality and implementation of controls do not expose the bank to a significant level of risk.

- Achieve excellence by driving performance, compliance and security.

- Provide oversight and control over third-party Threat-led Penetration Tests in line with the varied regional regulatory requirements and the organisation's risk appetite.

- Work with key stakeholders to proactively drive the reduction in Cybersecurity risks and to improve the security risk posture of HSBC within the business risk appetite.

- Provide subject matter expertise and guidance to a broad range of stakeholders across global business and functions.

Requirements:

- Education to degree level or above or relevant work experience.

- Fluent written and spoken English.

- Proven written and verbal communication skills.

- Strong team management, leadership and team building skills.

- Ability to develop clear business impact and justification to drive investment in team capabilities.

- Demonstrated experience running highly sensitive projects.

- Demonstrated experience in meeting red team regulatory requirements.

- Understanding of TLPT Frameworks such as CBEST, iCast, TIBER, CORIE, AASE.

- Demonstrable experience in vulnerability identification and exploitation.

- Participation in the Cyber Security industry.

- Knowledge of malware packing, obfuscation, persistence, exfiltration techniques.

- Knowledge on bypassing security controls such as DLP, Endpoint Protection, Firewalls, IDS/IPS and Web Proxies.

- Demonstrable experience in tooling, automation and prototyping.

- Demonstrated experience in source code review.

- Demonstrated experience in penetration testing.

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count.

## Skills

### Required
- TLPT Frameworks
- vulnerability identification
- exploitation
- malware packing
- obfuscation
- persistence
- exfiltration techniques
- DLP
- Endpoint Protection
- Firewalls
- IDS/IPS
- Web Proxies
- tooling
- automation
- prototyping
- source code review
- penetration testing

---

Source: [Apply at portal.careers.hsbc.com](https://portal.careers.hsbc.com/careers/job/563774612562633?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)