We are currently seeking an experienced professional to join our team in the role of Senior Business Analyst in Cybersecurity.

Principal responsibilities:

Deliver security research and testing projects focused on HSBC critical services and projects to ensure that design, quality and implementation of controls do not expose the bank to a significant level of risk.
Achieve excellence by driving performance, compliance and security.
Provide oversight and control over third-party Threat-led Penetration Tests in line with the varied regional regulatory requirements and the organisation's risk appetite.
Work with key stakeholders to proactively drive the reduction in Cybersecurity risks and to improve the security risk posture of HSBC within the business risk appetite.
Provide subject matter expertise and guidance to a broad range of stakeholders across global business and functions.

Requirements:

Education to degree level or above or relevant work experience.
Fluent written and spoken English.
Proven written and verbal communication skills.
Strong team management, leadership and team building skills.
Ability to develop clear business impact and justification to drive investment in team capabilities.
Demonstrated experience running highly sensitive projects.
Demonstrated experience in meeting red team regulatory requirements.
Understanding of TLPT Frameworks such as CBEST, iCast, TIBER, CORIE, AASE.
Demonstrable experience in vulnerability identification and exploitation.
Participation in the Cyber Security industry.
Knowledge of malware packing, obfuscation, persistence, exfiltration techniques.
Knowledge on bypassing security controls such as DLP, Endpoint Protection, Firewalls, IDS/IPS and Web Proxies.
Demonstrable experience in tooling, automation and prototyping.
Demonstrated experience in source code review.
Demonstrated experience in penetration testing.

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count.

Senior Analyst

Skills