Third Party Security Assessment Senior Analyst

Some careers have more impact than others.If you’re looking for a career where you can make a real impression, join HSBC, and discover how valued you’ll be.HSBC is one of the largest banking and financial services organizations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realize their ambitions.- “At HSBC we offer our colleagues a greater number of days so that they can fully enjoy their wedding, take care of the new member of the family, or grieve the loss of a family member._- Our paid leave package is at the forefront in Mexico, now you have one more reason to be HSBC and proudly live a culture of well-being, balance and car care”_We are currently seeking an experienced professional to join our team in the role of **Third Party Security Assessment Senior Analyst (**TPSA)**The Cybersecurity Assessment and Testing (CSAT) function, part of Global Cybersecurity, is accountable for Vulnerability Management, Secure Development (including. DevSecOps), Threat and Controls Assessment (threat modelling), Cloud Security and Third-Party Cybersecurity Assessment. The function drives the identification, capture, assessment, testing and ultimately the remediation of security defects, gaps and vulnerabilities across HSBC’s estate in concert with business and technology teams- on premise, within the Cloud and for those resulting from third party engagements.The role of TPSA Senior Analyst reports directly into Head of TPSA - Latin America. The Cybersecurity TPSA Senior Analyst role is responsible for operating as part of a global/local team within the Cybersecurity organisation, to analyse and execute activities around Cybersecurity process, controls, standards, and regulatory requirements. The Job holder will be a member of the Global Third-Party Security Assessment (TPSA) Service team within Cybersecurity and forms part of the 1LOD (1st line of defence). TPSA is a regulated activity.**The role will carry out some or all of the following activities**:- Ensuring adherence to the three lines of defence organisational model with clear lines of responsibility, accountability and segregation of duties.- Ensuring compliance with internal audit and external regulators that any organisational changes are fit for purpose and meet their expectations.- Analysing and executing activities to ensure compliance with HSBC Cybersecurity policies and standards.- Contributing to process, procedures and tool identification/development that will strengthen the bank’s response to threats and incidents.- Assessing new technology products and projects utilising security technologies pertinent to the department.- Engaging with other Cybersecurity teams, senior management and members of the Business when confronted with potential security issues.- Expanding skills, knowledge and experience to enhance the overall capability of the function.- Managing Engagements, Business Impact Assessments, Guidance requests, Quality Assurance.- Conducting Local and Global TPSRs (reviews, reports, identify deficiencies, quality assurance).- Engaging with the Global TPSR team to support TPSR work.- Articulate and explain information security assessment results to business.- Closure of identified deficiencies (verifying evidence to confirm closure or advise what is needed to close them).- Ensuring adherence to global standard methodology, SLA’s, quality, templates and tools.- Ensuring good stakeholder engagement.- Supporting overall activities of Global TPS, including admin and any special initiatives / projects.- MI / Reporting (actual generation of reports or contribution to appropriate reports).- Owning and driving special projects aligned to industry best practices.- Overseeing larger and more complex engagement requests and / or reviews.- Subject Matter Expert in own domain with, broad basic knowledge of other domains ensuring appropriate delivery of services along with aligning with the wider strategy and objectives of the bank overall.Requirements**What you will bring to the role**- Minimum Bachelor Degree and/ or experience in operational processes or third party information security reviews in the Financial Services industry or global corporate service provider- Background - desirable but NOT essential one or more; risk management, Audit, ISR- Qualifications - desirable but NOT essential one or more; ISO , CISA, CISM, CISSP, CRISC- Previous experience of delivering an excellent customer service- Ability to quickly develop good working relationships with stakeholders- Ability and motivation to learn and pick things up quickly- Positive and professional attitude, team player, flexible and adaptable, open to change(s)- Confident and takes responsibility and ownership for work and personal development- Good spoken and written commu