Job Advert Details
Some careers shine brighter than others.
If you’re looking for a career that will help you stand out, join HSBC, and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.
Your career opportunity
The Global Cybersecurity Function is responsible for protecting our customers, systems, and colleagues from Cyber Threats, whilst enabling the Business to grow securely, with resilience and at pace. This is achieved through the management of Cyber Risk through education, foresight, and information to drive risk-based decision making across HSBC.
Within Cyber Education and Awareness, we are responsible for the design, and delivery of Training and Awareness to the wider HSBC organisation, to ensure colleagues understand their cybersecurity duties and responsibilities relating to procedures, policies, and cyber risk management behaviours.
The role holder will work collaboratively with Control Owners, Project Manager, delivery partners and subject matter experts in gathering, translating, and clarifying project requirements and defining design options. The role holder will support with the translation of business requirements and designs into more detailed functional requirements and designs, representing the voice of the customer and business in these discussions, whilst ensuring data & information management integrity. The Business Analyst will also be responsible for UAT as part of the development & implementation lifecycle.
The Analyst will be working across multiple technology change projects aimed at development and optimisation of learning platforms, communication channels, phishing simulations tooling, and cyber control compliance (e.g. reporting incidents).
What you’ll do
• Take ownership of cloud security outcomes within GCP, aligned to HSBC policy and strategic direction.• Design, implement, and maintain GCP-specific preventive, detective, and corrective controls and recommend configuration changes to improve the effectiveness, performance, usability, and value of cloud security tools with focus on Google Cloud Platform (GCP).• Review, challenge and escalate security exemption requests from Global Business and Functions from mandatory security requirements, promoting consistent governance and risk management across all cloud platforms.• Participate in architecture/design reviews and GCP deployment pattern assessments, providing actionable security feedback.• Oversee and execute GCP security assessments through manual and automated methods.• Develop and maintain GCP security tooling, APIs, and internal knowledge repositories (e.g., Cloud Build Security Hub).• Collaborate with vendors and internal teams to integrate and optimize third-party cloud security solutions within GCP.• Drive continuous improvement of cloud security and automated processes to minimize variation and ensure predictable high-quality code and data.
What you need to have to succeed in this role
• Proven hands-on experience in Google Cloud Platform security services (e.g., IAM, VPC Service Controls, Cloud Security Command Center, GKE, Cloud Armor, etc.).• Proficient in BigQuery SQL and SQL for querying, analysing, and monitoring cloud data environments.• Experience working with CI/CD frameworks and Infrastructure as Code tools such as Terraform, Jenkins, GitHub, Ansible, and Nexus.• Extensive working knowledge of software development and mandatory deployment tools; e.g. Python, Bash, or PowerShell, MS Visual Studio.• Solid understanding of cloud-native data formats and tooling (JSON, YAML, gcloud CLI, etc.).• Experience with system/infrastructure security and automation within GCP environments.• Strong knowledge of Agile working methodologies.• Strong collaboration skills with a focus on building relationships across Cloud Platform teams, security architects, application teams, cross functional IT and global/local IT teams, and stakeholders.
What we offer
• Competitive salary• Annual performance-based bonus• Additional bonuses for recognition awards• Multisport card• Private medical care• Life insurance• One-time reimbursement of home office set-up (up to 800 PLN).• Corporate parties & events• CSR initiatives• Nursery discounts• Financial support with trainings and education• Social fund• Flexible working hours• Free parking
If your CV meets our criteria, you should expect the following steps in the recruitment process:
• Online behavioural test (for external candidates only)• Telephone screen (for external candidates only)• Zoom interview with the hiring manager
We are looking to hire as soon as possible so don’t wait and apply now!
You'll achieve more when you join HSBC.
We thank all interested candidates for their applications. We reserve the right to contact only selected candidates.
In case you would like to resign from participation in recruitment process or withdraw previously sent to us application, please email us at: krakow.recruitment@hsbc.com