Information Security Policy Management

Job Description: Maintain and further enhance the HSBC.com information security awareness, learning and training program to meet requirements from regulators.



Effectively manage security projects and track/estimate resource usage.



Ensure HSBC.com information security policies are kept up to date, maintaining alignment with HSBC Group policies, self assessments with government requirements and oversight of a number of network security activities.



Principal Accountabilities:




Manage the HSBC.com information security awareness, learning and training program. This will include the development of training programs on different information security domains provided through different media (web-based, instructor-led) as well as managing their execution.


Coordinate and effectively manage information security projects. Track and estimate resource usage and capital expenditure of the group for planning and reporting purposes.


Research the latest relevant technologies and develop HSBC.com information security policies for their use. Maintain alignment of HSBC.com information security policies with Group Policies.


Ensure compliance monitoring is in place, including processes for management of operational risk, in accordance with Company and regulatory standards.


Complete other related duties as assigned.


Support the Company’s Diversity programs.

Job Experience:

Strong security architecture, product /technology and conceptual knowledge within the information security domains of access control, systems development, operations security, and networks

6-8 years of total experience working in information security related activities

2-3 years recent experience in the development of training and awareness programs based on the latest technologies

Strong program and project management skills. Should be able to plan and manage project resources and track to completion

3-4 years recent experience in the development and maintenance of information security policies and procedures

2-3 years recent experience in working with project management teams. PMP certification highly desirable.

Experience and knowledge in local regulations like GLBA, SOX, FFIEC, OFAC

Polished and professional oral and written skills. Experienced facilitator and briefer

Proven and demonstrated leadership qualities including the ability to collaborate with various groups, foster and develop a common understanding towards achieving their goals

Required CISSP certified

Bachelors degree in Computer Science, Engineering or Mathematics highly desirable


HSBC Compensation
HSBC is a pay for performance company with policies and programs designed to ensure all employees receive fair and equitable compensation based on performance. Our compensation program is designed to attract, motivate, develop and retain the very best people.



HSBC Benefits
We are proud of our comprehensive flexible benefit program. Our program allows our employees to select the features that make the most sense for their individual and/or dependent(s) needs. Our benefit features include, but are not limited to; medical, prescription drug, dental, vision, life insurance, short and long term disability, retirement plans, stock option purchase plan, and a competitive time off program.

Searchable Keywords: Information Security Policy Management / gj-mo

Years of Experience Required: More than 5 years

Expected Travel Time: None