Cyber Security Manager (Omani National)

GCB 5 Some careers grow faster than others. If you’re looking for further opportunities to develop your career, take the next step in fulfilling your potential right here at HSBC. Cybersecurity enables businesses and functions to manage information security risks by ensuring that risks and controls are assessed and implemented appropriately, objectively and independently, supported by professional and specialized subject-matter expertise. The Cybersecurity Manager will lead the Cybersecurity Function for the Oman branch as part of the global and regional Cybersecurity organization. The role will be responsible for defining and implementing an industry-leading cybersecurity service that evolves in response to the constantly changing information security threat landscape. The role holder will build trusted relationships with country and regional senior stakeholders, support regional cybersecurity initiatives and act as the Information Security Officer for Oman. Responsibilities will also include addressing local regulatory requirements, representing the organization at financial-sector cybersecurity forums, and acting as the key contact for internal and external auditors on cybersecurity matters. Duties & Responsibilities: - Collaborate with Global, Regional and Country Technology representatives, as well as peer managers, to deliver team objectives within applicable country policies, budgetary limits and regulatory requirements. - Lead and support colleagues in developing, implementing and monitoring a strategic, comprehensive enterprise cybersecurity management programme. - Support Group and Regional business technology planning by providing up-to-date insight into current capabilities and a forward-looking view of technology and systems. - Contribute to the Country and Regional Cybersecurity strategy, protecting the bank’s technology environment while upholding and enhancing HSBC’s values, reputation and stakeholder value. - Support the Regional Chief Information Security Officer in delivering global cybersecurity programmes across the region and country. - Coordinate and deliver cybersecurity training and awareness sessions to strengthen employees’ understanding of information security. Set performance objectives for direct reports and support their professional development. - Work with business stakeholders across the organization to raise awareness of risk management matters, communicate the country’s cybersecurity risk profile and promote appropriate risk mitigation and control actions. - Balance organizational security requirements with business objectives to manage security risks while enabling the achievement of strategic goals. - Monitor the evolving threat landscape and brief the Country Board and senior management on the bank’s security posture, emerging threats and significant events affecting the financial-services industry. - Provide country management with regular updates on cybersecurity improvement initiatives, including their benefits, progress, key challenges and any decisions or support required. - Provide guidance to ensure that country-specific cybersecurity regulatory requirements are addressed promptly through the implementation of appropriate controls and the development or enhancement of policies and standards. - Support cybersecurity governance activities by maintaining alignment with Global and Regional messaging and ensuring that formal oversight is exercised through the appropriate governance forums. - Lead, coordinate and manage cybersecurity committee meetings, including agendas, materials, actions and follow-up. - Strengthen and maintain the bank’s relationships with the Central Bank and other relevant regulatory authorities. Experience & Qualifications: - A minimum of a bachelor’s degree, with at least 3 years’ experience in IT security governance and operational processes, preferably within the financial services industry or a global corporate services environment. - Experience in Risk management, Audit - A positive and professional approach, with the ability to work effectively as part of a team. - Flexible, adaptable and open to change. - Confident, accountable and willing to take ownership of responsibilities and ongoing professional development. - Strong written and verbal communication skills, with the ability to adapt communication style to different audiences. Fluency in written and spoken English is required. - Ability to explain complex technical and cybersecurity concepts clearly to non-technical stakeholders. - A proven commitment to delivering high-quality customer service. - Ability to build effective working relationships quickly with a broad range of stakeholders. - Self-motivated, with the ability to learn quickly and apply new knowledge effectively. For further details and application information please visit our careers site, searching for the reference number 60924. We support our staff to adopt flexible and alternative ways of working where

A minimum of a bachelor’s degree, with at least 3 years’ experience in IT security governance and operational processes, preferably within the financial services industry or a global corporate services environment. Experience in Risk management, Audit

Collaborate with Global, Regional and Country Technology representatives, as well as peer managers, to deliver team objectives within applicable country policies, budgetary limits and regulatory requirements. Lead and support colleagues in developing, implementing and monitoring a strategic, comprehensive enterprise cybersecurity management programme. Support Group and Regional business technology planning by providing up-to-date insight into current capabilities and a forward-looking view of technology and systems. Contribute to the Country and Regional Cybersecurity strategy, protecting the bank’s technology environment while upholding and enhancing HSBC’s values, reputation and stakeholder value. Support the Regional Chief Information Security Officer in delivering global cybersecurity programmes across the region and country. Coordinate and deliver cybersecurity training and awareness sessions to strengthen employees’ understanding of information security. Set performance objectives for direct reports and support their professional development. Work with business stakeholders across the organization to raise awareness of risk management matters, communicate the country’s cybersecurity risk profile and promote appropriate risk mitigation and control actions. Balance organizational security requirements with business objectives to manage security risks while enabling the achievement of strategic goals. Monitor the evolving threat landscape and brief the Country Board and senior management on the bank’s security posture, emerging threats and significant events affecting the financial-services industry. Provide country management with regular updates on cybersecurity improvement initiatives, including their benefits, progress, key challenges and any decisions or support required. Provide guidance to ensure that country-specific cybersecurity regulatory requirements are addressed promptly through the implementation of appropriate controls and the development or enhancement of policies and standards. Support cybersecurity governance activities by maintaining alignment with Global and Regional messaging and ensuring that formal oversight is exercised through the appropriate governance forums. Lead, coordinate and manage cybersecurity committee meetings, including agendas, materials, actions and follow-up. Strengthen and maintain the bank’s relationships with the Central Bank and other relevant regulatory authorities.