Cloud Security Specialist

Description:

The role of Cloud Security Specialist reports into the Global Head of Cloud Security, supporting the execution of capabilities aligned to their cloud security vision to support strategic business objectives at an enterprise level, enabling HSBC to make robust strategic and operational decisions in relation to business and cyber security requirements. The role is responsible for continually assessing the posture and maturity of cloud security engineering, designing, and championing security solutions and opportunities and as such demands a high level of technical experience and understanding of both Cloud technologies and Cybersecurity in the Cloud.

As an HSBC employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution.

In this role you will:

• Ownership of security outcomes as per management direction and HSBC Policy.

• Identify, oversee, implement and maintain preventive, detective, and corrective controls ensuring these are consistently applied across all platforms: Microsoft Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP) and Alibaba Cloud as appropriate.

• Participate in Global Businesses and Functions Architecture/ Design/ Cloud Deployment Pattern reviews and provide feedback to ensure cloud services meet mandatory security requirements and operate in a secure way.

• Provide SME oversight supporting the review, challenge and escalation requests from Global Businesses and Functions in respect of exemptions/ exceptions from relating to HSBC mandatory security requirements.

• Provide SME oversight, input, and sign-off of HSBC Cloud Security Baselines ensuring that all applicable HSBC security controls are embedded, stakeholder input is considered, compliance rules specified.

• Build, evolve and maintain a comprehensive in-house cloud security knowledge base (Cloud Build Security Hub) intended as a central point for all matters relating to Cloud Security and the defacto point of reference for customers and consumers of Cloud in HSBC.

Requirements

To be successful in this role you should meet the following requirements:

• Expert level knowledge and firsthand experience in a Cybersecurity role. Preference is for Cloud security experience supported by relevant Cybersecurity accreditation(s).

• Expert level knowledge and firsthand experience across Cloud platforms including Microsoft Azure, Amazon Web Services, Google Cloud Platform and Alibaba Cloud. Recognised accreditation(s) desired.

• Strong knowledge and awareness of industry standards pertinent to Cloud and Cybersecurity operations context.

• Experience in system/infrastructure implementation and operations with focus on Cloud.

• Ability to build strong relationships with Architecture, Application teams, cross functional IT and global/local IT teams. And importantly, business representatives. Communication style adaptable to the audience.

• Self-motivated and possessing of a high sense of urgency and personal integrity.

• Strong problem-solving and trouble-shooting skills.