Cryptography Control Owner @

24 hours ago

Kraków, Lesser Poland, Czech Republic HSBC Technology Poland Full time

What you need to have to succeed in this role

  • Deep understanding of technology (preferably in the Cryptography area) or who is willing to build up knowledge quick.
  • Ablility to communicate complex technical information to non-technical stakeholders and explain Cryptography control policies and procedures in a clear and concise manner. The control owner must be able to communicate to stakeholders on senior level, addressing challenges and feedback.
  • Ability to work effectively with cross-functional teams, including Cybersecurity and business units to ensure that Cryptography control strategies align with organizational goals and requirements.
  • Ability to identify and remediate challenges in (governance) processes

Some careers shine brighter than others

Cybersecurity is responsible for fielding solutions that help defend HSBC against a wide range of threats to the business as well as its customers, clients, partners, and staff. The team works in concert, with partner teams across HSBC, to implement novel defensive capabilities that are effective and adaptable against a constantly evolving threat landscape. The function operates under the vision: "Enabling HSBC to be safely successful everywhere the Firm chooses to do business."

Global Defense – Cybersecurity Engineering and Operations is comprised of several inter-joined teams:  Technical Directors Office (TDO), Site Reliability Engineering (SRE), Global Defense Governance & Delivery (GDD), Global Cybersecurity Operations (GCO) and Cybersecurity Intelligence & Threat Analysis (CITA). Together, the function enables an adaptive and constantly evolving capacity to address risks borne through an ever-shifting threat landscape. The function serves as an engine for innovation and problem solving with partner teams across the Firm who share a common imperative to be the best for our customers and drive the Global HSBC Purpose of "Opening up a world of opportunity."  

Your career opportunity

Our Technology teams work closely with HSBC's global businesses to help design and build digital services that allow our millions of customers around the world; to bank quickly, simply and securely. We also run and manage our IT infrastructure, data-centres and core banking systems that power the world's leading international bank.

Our multi-disciplined Technology teams include amongst others: DevSecOps engineers, IT architects, front and back-end developers, infrastructure specialists, cybersecurity experts, and delivery, project and programme managers. 

Following extensive investment across our Technology and Digital domains and with plans for continued expansion throughout 2021 and beyond, we are currently seeking a Global Head of Vulnerability Management to join the HSBC Cybersecurity team within Technology.

What we offer

  • Competitive salary
  • Annual performance-based bonus
  • Additional bonuses for recognition awards
  • Multisport card
  • Private medical care
  • Life insurance
  • One-time reimbursement of home office set-up (up to 800 PLN).
  • Corporate parties & events
  • CSR initiatives
  • Nursery discounts
  • Financial support with trainings and education
  • Social fund
  • Flexible working hours 
  • Free parking

If your CV meets our criteria, you should expect the following steps in the recruitment process:

  • Online behavioural test 
  • Telephone screen 
  • Job interview with the hiring manager

We are looking to hire as soon as possible so don't wait and apply now

You'll achieve more when you join HSBC.

,[Providing the first line of defense (1LOD) for the organization for all matters relating to Cryptography controls. Drive implementation of controls to protect the groups key data., Maintaining the accuracy and alignment of the CRYP control to the banks Risk Control framework., Control Design and Continuous Control Monitoring - MPs/OIs enhancements, Control effectiveness rationale. Managing, reporting, and improving performance metrics (KCIs)., Ensure Cryptography controls align with relevant regulations, standards, and industry best practices, and support compliance efforts. Maintain internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators., 2LoD/3LoD engagement - Responding to informal control queries and formal review and challenges and observations. Collaborate with senior stakeholders to facilitate understanding and alignment of CRYP control objectives, including business units, audit and regulators. Providing specialist knowledge and timely feedback, working in partnership with those stakeholders. , Develop and deliver training and awareness programs to educate stakeholders and communities within Cyber about the Cryptography control strategy., ] Requirements: Cryptography, Cybersecurity Additionally: Training budget, Private healthcare, Flat structure, International projects, Multisport card, Monthly remote work subsidy, Psychological support, Conferences, PPK option, Annual performance based bonus, Integration budget, International environment, Small teams, Employee referral bonus, Mentoring, Workstation reimbursement, Company share purchase plan, Childcare support programme, Bike parking, Playroom, Shower, Canteen, Free coffee, Free beverages, Free parking, In-house trainings, In-house hack days, No dress code, Modern office, Knowledge sharing, Garden, Massage chairs, Kitchen.

  • Cryptography Control Specialist

    7 hours ago

    Kraków, Lesser Poland, Czech Republic beBeeCryptography Full time 600,000 - 1,200,000

    Cryptography Control SpecialistAs a key member of our organization, you will be responsible for providing the first line of defense regarding all matters related to Cryptography controls. You will drive the implementation of controls to protect our key data and maintain the accuracy and alignment of the CRYP control with our Risk Control framework.Key...

  • Data Controls Design Manager @

    24 hours ago

    Kraków, Lesser Poland, Czech Republic HSBC Technology Poland Full time

    What you need to have to succeed in this roleKnowledge of and working experience with Information Lifecycle Management, Records Management and Data Privacy, including tooling solutions.  Ability to understand complex and abstract ideas and technical solutions.Experience with Risks and Controls, including Helios.Experience with developing Control...

  • Senior Product Owner @

    4 days ago

    Kraków, Lesser Poland, Czech Republic OEC Full time

    Who are we looking for someone who:Has 6+ years of experience in technical product or project ownership, ideally in cloud-based data platform environments; Brings a solid understanding of modern data architectures and software development lifecycle  Possesses strong communication skills and can effectively bridge technical and business...

  • Penetration Tester Expert

    7 hours ago

    Kraków, Lesser Poland, Czech Republic beBeeCyber Full time €80,000 - €100,000

    Job Description:We are seeking a highly skilled Penetration Tester to join our Cyber Security team.The successful candidate will be responsible for providing subject matter expertise in Penetration Testing to support wider Cyber Security efforts and organization.This role is part of a global/regional team within the Cybersecurity organization.The job...

  • Data Collaboration SME @

    24 hours ago

    Kraków, Lesser Poland, Czech Republic HSBC Technology Poland Full time

    What you need to have to succeed in this role3+ years of experience of Cybersecurity SME/Product Owner/Engineering/Strategy areas A background in information systems, technology, architecture, design, and service delivery of defense-in-depth capabilities.   Strong stakeholder management skills, with experience of understanding and meeting the needs of...

  • Lead Database Security Specialist

    10 hours ago

    Kraków, Lesser Poland, Czech Republic beBeeDatabaseManager Full time 400,000 - 800,000

    Key ResponsibilitiesTo define and implement secure configuration baselines for database management system software.To work with technical experts to agree on secure configuration baselines.In order to achieve success, individuals should possess strong leadership skills and be able to communicate effectively with various stakeholders.This role requires...

  • Lead SME Data Protection

    24 hours ago

    Kraków, Lesser Poland, Czech Republic HSBC Technology Poland Full time

    What you need to have to succeed in this roleWide range of security experience across cyber with specific focus on Data Security, privacy and data anonymisationExperience of operating a key security service with demanding end users, tight timelines and a need for precise record keepingKnowledge of data anonymisation techniques including masking,...

  • Security Expert in Network Operations

    7 hours ago

    Kraków, Lesser Poland, Czech Republic beBeeNetworkSecurity Full time 600,000 - 1,000,000

    Job SummaryWe are seeking an experienced professional to join our team as a Security Expert in Network Operations. This role will be responsible for supporting the development and implementation of network visibility processes and requirements, collaborating with key risk stakeholders, and working closely with other teams to ensure effective and adaptable...

  • Senior Audit Specialist @

    24 hours ago

    Kraków, Lesser Poland, Czech Republic Capgemini Polska Sp. z o.o. Full time

    YOUR PROFILEProven experience in internal controls, audit, or risk management.Strong analytical and problem-solving skills.Excellent communication and interpersonal skills.Ability to work independently and as part of a team. Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you'd like, where you'll be...

  • Lead Cybersecurity Operations Integration Analyst @

    24 hours ago

    Kraków, Lesser Poland, Czech Republic HSBC Technology Poland Full time

    To succeed in this role you need to have:Knowledge and demonstrated experience of common cybersecurity technologies such as; IDS / IPS / HIPS, AV, EDR, Firewalls, Proxies etc.Knowledge of common network protocols such as TCP, UDP, DNS, DHCP, IPSEC, HTTP, etc. and network protocol analysis suits.Excellent knowledge of common enterprise technology...