Chief Information Security Officer (CISO)

About the role

The Chief Information Security Officer (CISO) will lead HSBC's information security function within the GCIO organisation, ensuring the protection of customer data and the bank’s assets while supporting business innovation.

Key responsibilities

• Drive execution of global and regional information security and cybersecurity strategy, aligning with market regulatory requirements.
• Manage governance, reporting, remediation, and secure business transformation initiatives.
• Formulate and oversee bank‑wide information security policies and protection strategies.
• Lead the cybersecurity department in daily operations, incident management, and risk mitigation.
• Collaborate with global, regional and local stakeholders to implement cyber security programs and regulatory compliance.
• Support the ASP Regional Cybersecurity team in implementing strategic initiatives across markets.
• Provide cybersecurity training, raise awareness, and advise business units and second‑line defense on risk management.

Required profile

• Proven senior leadership experience in information security, cyber risk management and governance.
• Strong understanding of banking regulations and ability to communicate risk posture to boards and senior management.
• Track record of developing and implementing enterprise‑wide security programs.
• Excellent stakeholder management and influencing skills across global and regional teams.

Required skills