Control Analyst /Consultant Specialist

Some careers shine brighter than others. If you re looking for a career that will help you stand out, join HSBC, and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further. HSBC is one of the largest banking and financial services organizations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realize their ambitions. We are currently seeking an experienced professional to join our team in the role of Consultant Specialist In this role you will: Serve as the subject matter expert (SME) for risk and controls across SDLC, DEPL, CHNG, and INCM processes. Provide proactive advisory support to technology teams to design, implement, and enhance control environments aligned with policies, regulatory expectations, and risk appetite. Conduct deep dives into control frameworks for software development, deployment, change management processes, and incident management processes. Drive end-to-end risk assessments, control testing, and effectiveness reviews. Partner with DevOps, Engineering, and Production Support teams to embed risk identification and mitigation into Agile and DevSecOps pipelines. Review and challenge process changes to ensure appropriate risk considerations are incorporated. Support audit, regulatory exams, and compliance reviews; act as point of contact for technology-related audits within scope. Monitor key Control indicators (KCIs), incidents, issues, and control breaches, providing insights and recommendations to senior leadership. Provide training and awareness sessions for control owners and technology partners. Champion a strong risk culture across the organization. Requirements To be successful in this role, you should meet the following requirements: 8+ years of experience in Technology Risk, IT Audit, IT Governance, or related fields. Proven experience in DevOps practice and automation. Knowledge in Linux/Unix based operating systems. Experience in containerization and orchestration Deep understanding of SDLC frameworks (Agile, Waterfall, DevOps) and associated risk management practices. Strong knowledge of deployment automation, change management controls, and incident management best practices. Familiarity with control standards such as COBIT, NIST, ITIL, and ISO 27001. Proven experience advising technology teams and senior stakeholders. Hands-on experience with tooling such as ServiceNow, JIRA, GitHub, or similar for SDLC/CHNG/INCM. Excellent analytical, communication, and stakeholder management skills. Ability to influence without authority and drive a proactive risk management culture .