GCS: Head of Cloud Device Protection

Head of Cloud Device Protection The Head of Cloud Device Protection is responsible for developing and leading policy and strategies to protect device and processes hosted in “Cloud” ecosystems (Cattle, Containers and Serverless etc) and ensuring they are working in line with HSBC Cloud strategies. They are also responsible for ensuring the right processes and escalations are in place and consistent across the different Cloud environments to ensure effective operation of capabilities. Key activities include implementation and oversight of the Group’s Risk Management Framework, ongoing and targeted controls assessments, implementing and maintaining robust risk governance, and championing a proactive risk culture. GCIO CCO works closely with partners across all lines of defence and is responsible for maintaining positive relationships with regulators and external partners. What you’ll do A background in information systems, technology, architecture, design, and service delivery of defense‑in‑depth capabilities. Strong stakeholder management skills, with experience of understanding and meeting the needs of multiple stakeholders. An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative and actionable manner. Likely from a technology or engineering background with developed understanding of Technology Delivery Lifecycle, engineering practices, underlying infrastructure, tooling and architecture & design principles. Deep SME knowledge of containers. Experience working in a highly regulated, large multi‑national environment. Ability to understand the potential business impact of security decisions and align initiatives with business needs. Strong inter‑personal skills to work effectively with other areas inside and outside of cyber. What you need to have to succeed in this role Managing relationships with key stakeholders within the relevant Cloud Service Provider Teams within HSBC. Reviewing coverage and compliance across the Cloud Environments and escalating as required. Collaborating with other Cloud‑related Security teams such as Security Operations, Incident Management and Cloud Security to ensure joined‑up decisions are made. Tracking and oversight to completion for formal risk tickets. Responding to queries from auditors and regulators on the protections in place and their effectiveness. Analyzing available data related to issues (which could include native logs or captured telemetry to assist in driving issue remediations). What we offer The pay range for this role is 23,300 PLN – 34,500 PLN (monthly, gross). Additional car allowance: 4,786 PLN (monthly, gross). Variable pay is discretionary, but influenced by group performance, business/function performance and individual performance. We offer a comprehensive and competitive package of benefits covering healthcare, family‑friendly leaves, pension and life assurance, as well as many other benefits to support your wellbeing. Annual performance‑based bonus. Additional bonuses for recognition awards. Multisport card. Private medical care. Life insurance. One‑time reimbursement of home‑office set‑up (up to 800 PLN). Corporate parties & events. CSR initiatives. Financial support with training and education. Nursery discounts. Social fund. Free parking. #J-18808-Ljbffr