Advisor Control Interno

**Role purpose**

CCS Internal Control Advisor is responsible to agreeing timing and frequency, type of monitoring, sample sizes and locations to review end to end Collateral & appraisals processes should assess and oversee the on a periodic basis. Any issues should be identified and reported to the monthly RTB governance meetings, and all cases which have crossed the defined Collateral Perfection timelines must be highlighted by him to the governance meetings (Global & Local) and other appropriate governance forums/committees to ensure that the process is accurate.

The BIRO is responsible for assisting the Business in providing assurance to the Management that all Information Security Risk (ISR) policies, controls, processes and projects within their respective line of business have been implemented and to ensure that proportionate and effective information security controls are established and maintained.

**Principal Accountabilities and Responsibilities**
- Preparing an Internal Control Plan (‘ICMP‘) that captures all business and all material risks and key controls as described for Collateral Perfection and Appraisals.
- Oversight and challenge of procedures produced by line management
- Identifying emerging risk issues and associated controls through control testing activity
- Reporting risk issues, control monitoring and performance data to local management and committees.
- Ensure incident mgmt. process is complete, accurate, and timely; record incidents in Helios, adhering to thresholds and escalation (as appropriate).
- Undertake Information Security consultation - When required by the business, the BIRO function can operate in a consultancy capacity for information security risks. This is undertaken on both an AdHoc and organized basis and is vital for ensuring that information security controls are appropriate to the line of business and in line with the business’s risk appetite. Any risks identified by the line of business can be considered in the broader regional/global context.
- Support the implementation of primary ISR controls - This also may involve engaging with the implementation of ISR projects/programs as outlined in the BIRO Standard Operating Procedures including:
1. Training and Awareness

2. Information Classification

3. Securing Information (Storage, Transfer, Use, and Disposal)

5. Incident Management/Data Leakage Prevention

6. End User Computing (EUC)

7. Third Party Risk Governance

8. Securing Third Party Data Transfers
- Master your understanding of and execute the BRCM process in line with Global procedures including:

- Oversight and challenge of procedures produced by line management
- Identifying emerging risk issues and associated controls through control testing activity

**Requirements**:
**Functional Knowledge**
- Negotiation High
- Leadership High
- Operational Risk Knowledge High
- Microsoft Office knowledge (Word, Excel, Power Point, Visio y Project) High
- Projects management High
- Analysis and understanding of processes High
- Verbal ability High
- Handling conflicts High
- Basic Finances Knowledge Low

At HSBC we are committed to building a culture where al employees and customers are valued regardless of gender, age, sexual orientation, ethnicity, disability, religious belief, background or any other different personal aspect

We at HSBC act with integrity and courage, standing firm on what is right. We are reliable, open to different ideas and cultures connected with customers, the community, regulators and each other.