Business Information Risk Officer (BIRO) - #7469979

If you’re looking for a career where you can make a real impression, join Global Service Center (GSC) HSBC and discover how valued you’ll be. HSBC is one of the largest banking and financial services organisationsin the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realisetheir ambitions.

We are currently seeking an experienced professional to join our team in the role of Business Information Risk Officer (BIRO)

Business Information Risk Officers (BIRO) are responsible for ensuring all staff are aware of the relevant information Security Risk policies and provide advice and guidance on how to ensure compliance. They perform risk based monitoring of Information and Cyber Security Risk controls / policies and standards to validate control effectiveness and monitor timely resolutions of information security issues including the capability to detect, respond and recover from incidents.

In addition to these key responsibilities, the BIRO will be expected to:

· Support the business with identification of and management of their information security risks that are specific to their line of business/function.

· Provide regular reporting to senior management on risk and project progress, as required.

· Engage business/department management as required to ensure ownership and remediation of information security risks to meet internal/external audit and regulatory requirements.

· Participate in all relevant conferences and meetings with the Regional / Global Business / Function / Security Risk teams and IT Security structure

· Support the roll-out of Cyber Security maturity projects and participating in the post-implementation initiatives that uplift the risk controls.

· Act as an independent voice on behalf of the business to assess whether projects/initiatives adhere to Information and Cyber Security practices and raise awareness of the need to remediate any identified issues.

· Facilitate a community of Deputy BIROs that consists of staff from within line of business/function.

· Support the Global Exception Approval Request process (for when exceptions to policy are requested).

· Provide security and risk advice to stakeholders upon request.

· Oversee the response to Data Leakage Protection (DLP) incidents.

· Cascade security awareness and best practice information, and support Cyber Security Education & Awareness initiatives

· Be proactively identify continuous improvement programmes and initiatives to further embed a Cyber security practises/culture and simplify the processes for compliance

· Undertake activities as defined by Global BIRO, which may form a GB/GF’s annual BIRO plan