Senior Control Manager - US Technology
HSBC · Buffalo
Our purpose – Opening up a world of opportunity – explains why we exist. Here at HSBC, we use our unique expertise, capabilities, breadth, and perspectives to open up new kinds of opportunity for our more than 40 million customers. We’re bringing together the people, ideas and capital that nurture progress and growth, helping to create a better world – for our customers, our people, our investors, our communities, and the planet we all share
In compliance with applicable laws, HSBC is committed to employing only those who are authorized to work in the US. Applicants must be legally authorized to work in the U.S. as HSBC will not engage in immigration sponsorship for this position.
Ready to shape risk and control governance across US technology?
Why HSBC
HSBC is one of the largest banking and financial services organizations in the world. Guided by our purpose of opening up a world of opportunity, our ambition is to become the world’s most trusted bank globally, putting customers at the heart of everything we do.
The Opportunity
The Group Chief Information Office (GCIO) Chief Control Office (CCO) helps the bank operate within its risk appetite through efficient and effective risk and control management. We’re hiring a Senior Controls Manager to oversee US GCIO CCO within the Corporate and Institutional Banking (CIB) Western Markets Technology CCO team. The role supports senior management with clear oversight of operational risk management across the US technology estate including risk assessments, control effectiveness, governance, and issues management. You’ll work closely with partners across all lines of defense and maintain strong relationships with regulators and external partners. Success means clearer control health, well-owned remediation plans, and governance forums that enable risk-based decisions aligned to risk appetite.
What you'll be doing
- Review the Technology Control Standard (TCS) Governance Risk Assessment System (GRAS) and Key Control Indicators (KCIs) position and discuss risk impact with relevant stakeholders to support the compliance trajectory for the US technology estate
- Oversee the consumed position for US Technology, identify remediation owners, and progress required uplifts toward the expected compliance position
- Act as a trusted advisor to senior management on operational risk management including risk assessments, the control environment, and issues management
- Partner with Regional Risk Owners and Business Risk Teams to ensure control effectiveness, remediation timelines, and key issues are communicated clearly
- Provide senior management with updates on relevant changes to policy or projects related to operational risk that impact their area of responsibility
- Support a strong risk management culture within US Technology by identifying control gaps, shaping pragmatic remediation plans, and tracking delivery to completion with clear ownership
- Run US Technology risk and control governance forums by setting agendas, engaging stakeholders, curating spotlight topics, and enabling risk-based decision-making aligned to risk appetite
- Conduct and oversee thematic reviews and targeted deep dives across technology operations and cybersecurity risks including recurring incidents, control breaks, audit themes, and read-across activity
- Support assurance activities including Internal Audits, second line of defense (2LoD) reviews, regulatory examinations and visits and information requests, and other independent assurance activity
- Ensure control responsibilities, attestations, issue management, and governance artifacts are applied consistently and remain fit for purpose
What we're looking for
- Bring substantial hands-on experience across one or more control capabilities in the technology and cyber risk domain either directly or within a first, second, or third line of defense (1LoD, 2LoD, 3LoD) control management function
- Apply deep, proven expertise in operational risk, non-financial risk, and or technology and information security risk management
- Demonstrate experience identifying, defining, and solving problems that impact your work or the wider business
- Present complex issues concisely to senior stakeholders using clear non-technical language
- Bring experience working in financial services or another highly regulated industry including engagement with regulatory bodies
- Use strong communication skills to influence stakeholders and provide effective constructive challenge
- Operate effectively with limited supervision while maintaining sound judgement and follow-through
- Hold Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certificate of Cloud Security Knowledge (CCSK) or equivalent certification, or bring equivalent demonstrable experience
Strengthening US Technology Controls
This role offers the scope to improve how risk and controls are governed across a complex US technology estate. You’ll partner with senior management and teams across all lines of defense to strengthen control effectiveness and ensure issues are owned and remediated. The work spans governance forums, thematic reviews, and support for audits and regulatory engagement. If you want your work to translate into clearer risk decisions and better control outcomes at scale, we’d like to hear from you.
As an HSBC employee, you will have access to tailored professional development opportunities to ensure you have the right skills for today and tomorrow. We offer a competitive pay and benefits package including a robust Wellness Hub, all in a welcoming and inclusive work environment. You will be empowered to drive HSBC’s engagement with the communities we serve through an industry-leading volunteerism policy, a generous matching gift program, and a comprehensive program of immersive Sustainability and Climate Change Initiatives. You’ll want to join our Employee Resource Groups as they play a central part in life at HSBC, including the development of our employees and networking inside and outside of HSBC. We value difference. We succeed together. We take responsibility. We get it done. And we want you to help us build the bank of the future!
The final fixed pay offer will depend on the candidate and a number of variables, including but not limited to, role responsibilities, skill set, depth of experience and education, licensing/certification requirements, internal relativity, and specific work location.
All qualified applicants will receive consideration for employment without regard to age, ancestry, color, race, national origin, ethnicity, disability or medical condition, genetic information, military or veteran service, religion, creed, sex, gender, pregnancy, childbirth, caregiver status, marital status, citizenship or immigration status, sexual orientation, gender identity or expression or any other trait protected by applicable law.