Cyber Security Manager (Omani National)

GCB 5 Some careers grow faster than others. If you’re looking for further opportunities to develop your career, take the next step in fulfilling your potential right here at HSBC. Cybersecurity enables businesses and functions to manage information security risks by ensuring that risks and controls are assessed and implemented appropriately, objectively and independently, supported by professional and specialized subject-matter expertise. The Cybersecurity Manager will lead the Cybersecurity Function for the Oman branch as part of the global and regional Cybersecurity organization. The role will be responsible for defining and implementing an industry-leading cybersecurity service that evolves in response to the constantly changing information security threat landscape. The role holder will build trusted relationships with country and regional senior stakeholders, support regional cybersecurity initiatives and act as the Information Security Officer for Oman. Responsibilities will also include addressing local regulatory requirements, representing the organization at financial-sector cybersecurity forums, and acting as the key contact for internal and external auditors on cybersecurity matters. Duties & Responsibilities • Collaborate with Global, Regional and Country Technology representatives, as well as peer managers, to deliver team objectives within applicable country policies, budgetary limits and regulatory requirements. • Lead and support colleagues in developing, implementing and monitoring a strategic, comprehensive enterprise cybersecurity management programme. • Support Group and Regional business technology planning by providing up-to-date insight into current capabilities and a forward-looking view of technology and systems. • Contribute to the Country and Regional Cybersecurity strategy, protecting the bank’s technology environment while upholding and enhancing HSBC’s values, reputation and stakeholder value. • Support the Regional Chief Information Security Officer in delivering global cybersecurity programmes across the region and country. • Coordinate and deliver cybersecurity training and awareness sessions to strengthen employees’ understanding of information security. Set performance objectives for direct reports and support their professional development. • Work with business stakeholders across the organization to raise awareness of risk management matters, communicate the country’s cybersecurity risk profile and promote appropriate risk mitigation and control actions. • Balance organizational security requirements with business objectives to manage security risks while enabling the achievement of strategic goals. • Monitor the evolving threat landscape and brief the Country Board and senior management on the bank’s security posture, emerging threats and significant events affecting the financial-services industry. • Provide country management with regular updates on cybersecurity improvement initiatives, including their benefits, progress, key challenges and any decisions or support required. • Provide guidance to ensure that country-specific cybersecurity regulatory requirements are addressed promptly through the implementation of appropriate controls and the development or enhancement of policies and standards. • Support cybersecurity governance activities by maintaining alignment with Global and Regional messaging and ensuring that formal oversight is exercised through the appropriate governance forums. • Lead, coordinate and manage cybersecurity committee meetings, including agendas, materials, actions and follow-up. • Strengthen and maintain the bank’s relationships with the Central Bank and other relevant regulatory authorities. Experience & Qualifications • A minimum of a bachelor’s degree, with at least 3 years’ experience in IT security governance and operational processes, preferably within the financial services industry or a global corporate services environment. • Experience in Risk management, Audit • A positive and professional approach, with the ability to work effectively as part of a team. • Flexible, adaptable and open to change. • Confident, accountable and willing to take ownership of responsibilities and ongoing professional development. • Strong written and verbal communication skills, with the ability to adapt communication style to different audiences. Fluency in written and spoken English is required. • Ability to explain complex technical and cybersecurity concepts clearly to non-technical stakeholders. • A proven commitment to delivering high-quality customer service. • Ability to build effective working relationships quickly with a broad range of stakeholders. • Self-motivated, with the ability to learn quickly and apply new knowledge effectively. For further details and application information please visit our careers site, searching for the reference number 60924 . We support our staff to adopt flexible and alternative ways of working where possible, including working from home and different hours subject to approvals. HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working, and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website. Issued by The Hong Kong and Shanghai Banking Corporation Limited Show more Show less

A minimum of a bachelor’s degree, with at least 10 years’ experience in IT security governance and operational processes, preferably within the financial services industry or a global corporate services environment. Experience in risk management and audits. Fluency in written and spoken English. Ability to explain complex cybersecurity concepts clearly to non-technical stakeholders. Strong written and verbal communication skills; professional, adaptable, and able to work with a broad range of stakeholders. Willingness to take ownership and maintain ongoing professional development.

Lead the Cybersecurity Function for the Oman branch as part of HSBC’s global and regional cybersecurity organization. Define and implement an enterprise cybersecurity management programme. Support regional cybersecurity initiatives and act as the Information Security Officer for Oman. Address local regulatory requirements and represent the bank at financial-sector cybersecurity forums. Serve as the key contact for internal and external auditors on cybersecurity matters. Deliver cybersecurity training and awareness sessions; set objectives for direct reports and support their development. Communicate risk management matters to business stakeholders and promote appropriate risk mitigation. Balance security requirements with business objectives. Monitor threat landscape and brief senior management on security posture and significant events. Provide regular updates on improvement initiatives and governance, including regulatory compliance. Lead cybersecurity committee meetings and maintain relationships with regulators such as the Central Bank.