Third-Party Security Assessment Consultant @

3 days ago

Kraków, Lesser Poland, Czech Republic HSBC Technology Poland Full time

What you need to have to succeed in this role

  • Knowledge and exposure of Risk and Control Management frameworks and control design and execution, in theory and practice.
  • Ability to understand and articulating defects, threats and technical gaps to both technical and business stakeholders.
  • Degree and/or similar experience, preferably in IT security in the Financial Services industry or global corporate service provider
  • Have one or more industry-recognised cybersecurity-related certifications including CISA, CISM, CISSP, CRISC and CCSP etc.
  • A demonstrable technical understanding in Cloud Security (particularly for SaaS) and AI is desired.
  • Experience in third party / supply chain governance.
  • Ability to prepare concise updates, reports and presentations for senior stakeholders.
  • Ability to manage multiple projects and priorities concurrently

Some careers shine brighter than others.

If you're looking for a career that will help you stand out, join HSBC, and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

Your career opportunity

The Cybersecurity Assessment and Testing (CSAT) function, part of Cybersecurity, is accountable for Vulnerability Management, Secure Development (inc. DevSecOps), Threat and Controls Assessment (inc. threat modelling) and Third-Party Security Assessment. The function drives the identification, capture, assessment, testing/verification and ultimately the remediation of security defects, gaps and vulnerabilities across HSBC's estate in concert with business and technology teams – on-premise, within the Cloud and for those resulting from 3rd party engagements.

If your CV meets our criteria, you should expect the following steps in the recruitment process:

  • Online behavioural test
  • Telephone screen
  • Job interview with the hiring manager

We are looking to hire as soon as possible so don't wait and apply now You'll achieve more when you join HSBC.

,[Collaborate with both CSAT and Cybersecurity, the role-holder will be expected to contribute to, and to support delivery of the cybersecurity strategy., Support Control Officers, Risk Stewards, Internal and External Audit, and Regulators with any relevant reviews, examinations and information requests. , Develop as an SME and help to inform wider embedding and training on the consultancy approach to peer TPSA analysts to build and develop the team. , Acting as a pioneer to prove the developing approach you will engage with other Cyber teams, Third Party Management, and other risk teams to deliver Cyber risk support at a global level., Define and shape a developing approach for Cyber risk consultancy integrating into the end-to-end procurement process from supplier selection to completed onboarding and issue remediation on critical control gaps.] Requirements: Python, TensorFlow, PyTorch Additionally: Training budget, Private healthcare, Flat structure, International projects, Multisport card, Monthly remote work subsidy, Psychological support, Conferences, PPK option, Annual performance based bonus, Integration budget, International environment, Small teams, Employee referral bonus, Mentoring, Workstation reimbursement, Company share purchase plan, Childcare support programme, Bike parking, Playroom, Shower, Canteen, Free coffee, Free beverages, Free parking, In-house trainings, In-house hack days, No dress code, Modern office, Knowledge sharing, Garden, Massage chairs, Kitchen.

  • Security Risk Management Professional

    2 days ago

    Kraków, Lesser Poland, Czech Republic beBee Careers Full time

    About the RoleAs a Third-Party Security Assessment Consultant, you will play a crucial role in ensuring the security and integrity of our organization's third-party relationships.

  • Threat and Control Assessment Consultant @

    4 days ago

    Kraków, Lesser Poland, Czech Republic ITDS Full time

    You're ideal for this role if you have:Proven experience in general security concepts and principles Hands-on experience with threat modeling and assessing vulnerabilities Strong understanding of application design and architecture Knowledge and experience with network, host, and application security practices Good working knowledge of Cloud Service...

  • Cybersecurity Threat Assessment Specialist

    3 days ago

    Kraków, Lesser Poland, Czech Republic beBee Careers Full time

    Threat and Control Assessment Consultant Role Overview">Main Responsibilities:Performing effective threat and control assessments of services within internal, external, and cloud estatesLiaising with developers, architects, and technical leads to identify control gapsUnderstanding business requirements and evaluating potential solutions with technical...

  • Network Security Consultant

    3 days ago

    Kraków, Lesser Poland, Czech Republic beBee Careers Full time

    Job Summary">This role involves providing subject matter consultancy and thought leadership on network security control issues and initiatives.The successful candidate will have a focus on network security products, solutions, architecture, and best practices, with the ability to apply them to real-world challenges faced by the organisation.">About This...

  • Senior Security Consultant

    2 days ago

    Kraków, Lesser Poland, Czech Republic beBee Careers Full time

    As a seasoned Penetration Tester, you will be responsible for providing expert-level guidance on penetration testing and contributing to the organization's cybersecurity efforts.About the RoleThis is an exciting opportunity to work with a global/regional team within the Cybersecurity organization, providing expertise, oversight, and assurance around security...

  • Cybersecurity Expert

    2 days ago

    Kraków, Lesser Poland, Czech Republic beBee Careers Full time

    **Network Security Consultant Role Overview**This role focuses on providing expert advice and guidance on network security products, solutions, architecture, and best practices.Responsibilities include consultancy services for Network Security control issues and initiatives.The ideal candidate will have a strong understanding of network design, firewall,...

  • Expert Network Security Specialist

    2 days ago

    Kraków, Lesser Poland, Czech Republic beBee Careers Full time

    About the RoleThis role is focused on providing subject matter consultancy, thought leadership and project delivery in relation to Network Security control issues and initiatives. As a Principal SME - Network Security Consultancy, you will be responsible for applying your expertise in network security products, solutions, architecture, and best practices to...

  • Senior IT Consultant Position

    2 days ago

    Kraków, Lesser Poland, Czech Republic beBee Careers Full time

    Lead Technical Consultant">About the Role:">">Technical leaders with at least 10 years of experience in IT, telecom, or enterprise environments are sought after for this position.">Minimum 5 years of experience in technical leadership or consulting roles is required.">">Key Responsibilities:">">Proven expertise in customer-facing consulting roles, ideally in...

  • Cloud Security Automation Specialist

    2 days ago

    Kraków, Lesser Poland, Czech Republic beBee Careers Full time

    Secure CI/CD Pipeline DeveloperWe are seeking an experienced DevOps professional to build and maintain secure, efficient CI/CD pipelines and Infrastructure as Code environments.The ideal candidate will have a strong automation mindset, deep technical expertise, and the ability to collaborate across multiple teams in a complex, regulated...

  • Network Security Architect Position

    2 days ago

    Kraków, Lesser Poland, Czech Republic beBee Careers Full time

    Network Security ArchitectWe are seeking a highly skilled Network Security Architect to join our team. As a key member of our cybersecurity team, you will be responsible for designing and implementing network security solutions that meet the evolving needs of our organization.Key Responsibilities:- Design and implement network security architectures that...