Senior Manager

Description:

We’re currently seeking an experienced professional to join our Technology Risk and Control team in the role of Senior Manager – Technology Governance & Frameworks

In this fantastic role, you’ll lead the adoption of risk and control frameworks within HSBC’s GCIO area, turning policy into practical execution and clear governance. You’ll partner with senior stakeholders, support audit and regulatory responses, and deliver executive-level reporting that improves resilience, cybersecurity and control effectiveness—making a measurable impact at scale.

As an HSBC employee in the UK, you’ll have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution.

In This Role, You Will
 

• Simplify and standardise Technology Risk & Control (R&C) processes across GCIO to improve efficiency without reducing control rigour.
• Enhance the Risk & Control Assessment (RCA) approach to generate insights that drive clear risk ownership and action.
• Lead governance for Risk & Control Management Meetings (RCMMs) and executive forums, ensuring clear packs, decisions and follow-through.
• Provide oversight and constructive challenge on residual risk decisions to ensure alignment with policy, risk appetite and regulatory expectations.
• Support R&C engagement with Group Internal Audit (GIA) and External Audit, including evidence expectations and assurance responses.
• Draft and quality assure Board committee and regulatory materials that clearly articulate risk posture, key issues and mitigation plans.
   

To be successful in this role you should have the following skills:
 

• Hands-on technology risk management, governance and frameworks experience (designing/embedding).
• Strong knowledge of Operational Resilience, Cybersecurity and IT risk frameworks (e.g., NIST, COBIT, ITIL).
• RCA delivery and executive risk profile reporting (inherent/residual risk, appetite positioning, themes/trends).
• Ability to draft Executive/Board Committee-ready papers and senior executive briefings.
• Senior stakeholder management, including engagement with 3LoD/External Audit and understanding evidence standards and control design/operating effectiveness.
• Leading and providing line management of a supporting team