Associate Director, Cybersecurity Specialist

Our technology teams work closely with HSBC’s global businesses to help design and build digital services that allow our millions of customers around the world, to bank quickly, simply and securely. We also run and manage our IT infrastructure, data centres and core banking systems that power the world’s leading international bank.

Our multi-disciplined teams include DevOps engineers, IT architects, front and back-end developers, infrastructure specialists, cyber experts, as well as project and programme managers.

Following extensive investment across our Technology and Digital domains and with plans for continued expansion throughout 2025 and beyond, we are currently seeking a QA Testing Lead to lead the development of a central Professional Testing Practise.

Business area overview

Cybersecurity Technology & Engineering is responsible for fielding solutions that help defend HSBC against a wide range of threats to the business as well as its customers, clients, partners, and staff. The team works in concert, with partner teams across HSBC, to implement novel defensive capabilities that are effective and adaptable against a constantly evolving threat landscape. The function operates under the vision: “Enabling HSBC to be safely successful everywhere the Firm chooses to do business”.

What you will be doing

The role will report to the Head of Cyber Engineering Enablement and will be responsible for leading the establishment and development of Cyber's Professional Testing Practise, with the objective of driving improvements across all facets of testing across Cyber. The role will involve working closely with a wide range of stakeholders including Cybersecurity project teams, Control Owners and the business.

The role will:

• Establish and lead Cyber's Professional Testing Practice, with the objective of driving improvements across all facets of testing across Cyber and provide mentoring and monotiring of testing services. This will also include a roadmap for adoption across Cyber with the apprropriate funding and resource planning required to support the work.
• Define and deliver the Testing Strategy and standards across Cyber, including the frameworks, processes, methodologies and tooling that should be used and adopted by the Cyber teams, This will also include driving the adoption of automated test practices across Cyber and assiting teams in determining the correct level of performance and stress testing to be performed,
• Lead testing related process management, documentation, and continuous improvement initiatives and ensuring that the teams within Cyber adopt the intiatives.
• Manage a team of QA engineers, delivering testing consultancy to teams across Cyber, and working with Cyber project teams to achieve and maintain Conttol complaince.
• Identify and raise key issues and risks assocated with testing. This includes defining mitigating actions and providing active oversight for the issue or defect, tracking through its resolution.
• Ensure appropriate training is provided for the Testing Practice members and QA professionals within the Cyber teams and monitor the adoption and usage of tools within the existing environments.
• Provide standards and guidance for testing evidence suitable for audit review in our Regulated business environment and ensure that teams are following these guildelines.
• Establish a Cyber QA community of practice and create relationships with similar communities in other Business lines to ensure adoption of HSBC best practice within Cyber.

• 3+ years experience working as a QA Lead within an agile Software Development team; with relevant industry certification, and experience of both automated and manual testing;
• 3+ years of experience in designing automated and manual testing for Web application and REST API associated with 3rd parties;
• Direct experience in developing processes for, and conducting, performance testing
• Experience of defining and driving the adoption of automated and manual testing best practice;
• Demonstrable experience leading technical teams/colleagues and defining and delivering strategic objectives;
• Experience of managing stakeholders and developing relationship with other teams;
• Competency in Microsoft Excel, Visio and PowerPoint in order to conduct data analysis and present raw data in a simplified manner displaying trend analysis and highlighting outliers/exceptions;
• Familiar with Agile software development and DevSecOps delivery processes (burndown metrics, backlog tracking, velocity, task definition, retrospectives and defect management) and supporting tools, e.g., JIRA, Confluence, GIT, etc.
• Good verbal and written communication skills in English, including expereince of managing workshops and writing best practice documentation;
• Able to work in a fast paced, team focused environment with a proven track record of delivering and completing assigned tasks as an individual and as team;

Willingness to continuously learn and share learnings with others