Cyber Security Project Manager

Role & responsibilities

• Provide the Central PMO capability for the Cyber Resilience portfolio, managing multiple workstreams including Integrated Testing, Minimum Viable Services (MVS), Third-Party Resilience, cyber recovery, technology recovery, remediation and assurance activity.
• Based in India, reports to Cyber Resilience leadership and work across global HSBC teams, including Cyber Security, Technology, Operational Resilience, Risk, Crisis Management, business areas and third parties.
• Maintain an integrated portfolio and project plan covering severe-but-plausible cyber disruption scenarios, resilience testing, recovery activities, MVS outcomes, third-party dependencies, audit and assurance findings, regulatory commitments, priorities, milestones, resources and governance.
• Provide a single, accurate view of delivery across all Cyber Resilience workstreams, including progress, risks, issues, dependencies, remediation status, decisions, resource impacts and next steps.
• Translate Cyber Resilience objectives into requirements, work packages, deliverables, milestones, acceptance criteria and implementation plans, using workshops to define service impacts, recovery needs, dependencies, ownership and required change.
• Prepare clear, decision-ready slide packs and governance materials for senior management, steering committees, assurance teams, internal audit and formal Cyber CTB PMO forums.
• Maintain governance calendars, agendas, action logs, decision logs, meeting records and reporting cadence.
• Own the portfolio RAID log and remediation trackers, ensuring risks, assumptions, issues, dependencies and actions are documented, assessed, assigned, aged, escalated and closed with appropriate evidence.
• Apply HSBC change management requirements across project initiation, planning, approvals, stage gates, change controls, tolerances, reporting and closure, supporting formal Cyber CTB PMO governance.
• Convert lessons from testing, incidents, audits and assurance activity into prioritized improvement plans across recovery strategies, technical standards, architecture, service management, engineering practices, playbooks and investment roadmaps.
• Work with subject-matter experts to ensure plans, trackers and governance materials accurately reflect technical, business, regulatory and third-party risks.
• Build effective relationships across Cyber Security, Technology, Operational Resilience, Risk, Compliance, Internal Audit, business areas and critical third parties.
• Communicate complex cyber, technology and resilience matters clearly to technical, business and senior management audiences, providing evidence-based recommendations and constructive challenge.
• Manage project budgets, costs, invoices and financial commitments, coordinating with Finance, Procurement and suppliers to ensure accurate billing, timely processing and reporting of variances and financial risks.
• Produce a weekly PMO report covering delivery status, financial position, billing, invoicing, milestones, risks, issues, dependencies, remediation actions, decisions, resources and upcoming activity.
• Maintain project documentation, financial records and closure documentation in the approved SharePoint repository.

Mandatory skills

• Strong project management and PMO experience in banking sector or complex, global and highly regulated organization.
• Strong business analysis skills, including requirements gathering, process analysis, workshop facilitation, gap analysis, options assessment and benefits tracking.
• Proven ability to create high-quality PowerPoint slide packs and governance materials for senior stakeholders.
• Strong experience managing RAID logs, remediation actions, dependencies, milestones, integrated plans and trackers.
• Practical understanding of HSBC or equivalent enterprise change management, governance and stage-gate processes.
• Excellent communication, analytical and organizational skills, with the ability to simplify complex information and manage competing priorities.
• Ability to drive accountability, challenge constructively and follow actions through to evidenced closure.
• Practical understanding of cyber security, technology resilience, operational resilience, cyber recovery or related disciplines.
• Strong stakeholder management, influencing, facilitation and escalation skills.

Essential experience

• 8-12 years of experience as a Business Analyst, Project Manager, Programme Manager or PMO lead in a large, complex regulated organization, preferably within banking or financial services.
• Experience supporting multiple workstreams, senior governance forums, audit or regulatory remediation and formal change governance.
• Experience coordinating across Cyber Security, Technology, Risk and Operational Resilience teams in a global or matrixed environment.
• Experience supporting Cyber Change and Transformation Board governance, resilience testing, technology recovery exercises, critical business services, impact tolerances or third-party resilience.

Qualifications

• Project or programme management qualification such as PRINCE2, MSP, PMI/PMP or equivalent.
• Business analysis qualifications such as BCS Business Analysis or IIBA is advantageous.
• Cyber, technology or resilience qualifications such as CISM, CRISC, CISA, CBCI, ISO 22301 or ISO 27031 are beneficial but not essential.