
Lead IT Security Analyst
- Guangzhou, Guangdong
- Permanent
- Full-time
If you're looking for a career where you can make a real impression, join HSBC and discover how valued you'll be.We are currently seeking an experienced professional to join our team in the role of Lead IT Security Analyst.Business: CybersecurityPrincipal responsibilities
- Wide range of security experience across cyber with specific focus on Data Security, privacy and data anonymisation
- Experience of operating a key security service with demanding end users, tight timelines and a need for precise record keeping
- Knowledge of data anonymisation techniques including masking, tokenization, grouping, k-anonymisation and redaction
- Experience with anonymisation tools such as Privitar, Delphix, and CA TDM
- Internal and external relationships - Internal relationships extend from the local team to the whole of IT. Interaction with business and technology stakeholders including external vendors and suppliers.
- Executive & Stakeholder Management - Communication and engagement with Senior Management and other Executive stakeholders, effective verbal and report writing skills.
- Compliance & Regulatory Management - Management and contribution to any regulatory request relating to IT Security globally.
- A minimum of 2-5 years Cyber experience would be beneficial
- Experience working in a highly regulated environment
- Attention to detail, ability to compartmentalise and good organisational and communication skills are critical to this role
- Ability to work remote from central management, act on one's own initiative and make sound decisions that can be supported to regulators and auditors is essential.
- Typically educated to degree level within IT
- Experience working in relevant environments on Data Security principles and controls
- Ability to understand the needs of developer and analytics teams for the use of production data in lower level environments and the inherent risks associated with this activity
- Knowledge of Data Classification , Data Privacy and Data Anonymisation techniques
- Relevant product knowledge including knowledge of past working experience (hands-on experience) on Privitar, Delphix or CA TDM
- Demonstrable experience in IT or Cyber Security pertinent to this role with 5+ years experience
- Regulatory engagement, experience in dealing with compliance matters, and regulatory liaison would be beneficial
- Knowledge of any global regulatory requirements would be beneficial (eg GDPR)
- Ability to build strong relationships and communicate on complex IT Security issues with a wide spectrum of stakeholders.
- Understanding of business finance and experience of effective management of budgets and expenditure
- Comprehensive understanding of security in context of wider industry trends and direction
- Experience of working in a financial organisation would be beneficial
- Information Security Certification such as GIAC, CISSP, CISA, CRISC or ISO 27001 Lead Auditor not required, but considered a plus