Roles & Responsibilities:
- Responsible for continually assessing the posture and maturity of cloud security engineering, designing, and championing security solutions/ opportunities
- Managing development of security rules, configurations, automation and recommending configuration changes to improve
- Ownership of security outcomes (in relation to applicable cloud platforms) as per management direction and HSBC Policy.
- Reviewing/ challenging/ escalating requests from Global Businesses and Functions for exemptions/ exceptions.
- Actively participating in Global Businesses and Functions Architecture/ Design/ Cloud Deployment Pattern reviews.
- Oversight of Cloud Security Assessment security reviews, through manual and automated processes
- Liaising with Cloud platform engineers, architects, and business stakeholders to understand.
- Proactively researching emerging threats and vulnerabilities to aid in the identification of cloud threats.
Skills:
- Expert level knowledge on HSBC's current Cloud platforms with particular focus on AWS.
- Work knowledge on Tools - GitHub, MS Visual Studio, Python, Bash, PowerShell, SQL, and data formats such as XML, JSON, CSV
- Ability to build strong relationships with Cloud platform teams, security architects, application teams, cross functional IT and global/local IT teams.
- Strong problem-solving and trouble-shooting skills.
- Strong knowledge of Agile working methodologies.
Certifications:
- CISSP, CRISC, CISM or Cloud Security Certifications.
- Experience in deploying applications on the Cloud, using CI/CD frameworks and Infrastructure automation, such as: Jenkins, Terraform, Ansible, GitHub and Nexus.
- Google Cloud Services, Microsoft Azure, Alibaba Cloud.
