Senior Control Manager - US Technology

HSBC Global Services Limited•Buffalo, NY

About The Position

HSBC is hiring a Senior Controls Manager in the Group Chief Information Office Chief Control Office (GCIO CCO), within the Corporate and Institutional Banking Western Markets Technology CCO team. The role provides oversight of operational risk management across the US technology estate, including risk assessments, control effectiveness, governance, and issue management. It supports senior management and works with partners across all lines of defense, regulators, and external partners. The role focuses on improving risk and control governance, assessing compliance with the Technology Control Standard, identifying and progressing remediation, conducting thematic reviews, and supporting assurance activity. Success includes clear oversight of control health, well-owned remediation plans, and governance forums that enable risk-based decisions aligned with risk appetite.

Requirements

Substantial hands-on experience in one or more control capabilities in technology and cyber risk, either directly or in a first, second, or third line of defense control management function.
Deep, proven expertise in operational risk, non-financial risk, and/or technology and information security risk management.
Experience identifying, defining, and solving problems that affect individual work or the wider business.
Ability to present complex issues concisely to senior stakeholders using clear, non-technical language.
Experience in financial services or another highly regulated industry, including engagement with regulatory bodies.
Strong communication skills to influence stakeholders and provide effective constructive challenge.
Ability to work effectively with limited supervision while exercising sound judgment and follow-through.
CISA, CISSP, CRISC, CCSK, or equivalent certification, or equivalent demonstrable experience.
Must be legally authorized to work in the United States; HSBC will not provide immigration sponsorship.

Responsibilities

Review the Technology Control Standard Governance Risk Assessment System and Key Control Indicators position, and discuss risk impacts with relevant stakeholders to support compliance across the US technology estate.
Oversee the consumed position for US Technology, identify remediation owners, and progress required uplifts toward the expected compliance position.
Advise senior management on operational risk management, including risk assessments, the control environment, and issue management.
Partner with Regional Risk Owners and Business Risk Teams to communicate control effectiveness, remediation timelines, and key issues.
Update senior management on relevant policy or project changes related to operational risk that affect their area of responsibility.
Identify control gaps, shape pragmatic remediation plans, and track delivery to completion with clear ownership to support a strong risk management culture.
Run US Technology risk and control governance forums by setting agendas, engaging stakeholders, curating spotlight topics, and enabling risk-based decisions aligned to risk appetite.
Conduct and oversee thematic reviews and targeted deep dives across technology operations and cybersecurity risks, including recurring incidents, control breaks, audit themes, and read-across activity.
Support Internal Audits, second line of defense reviews, regulatory examinations and visits, information requests, and other independent assurance activities.
Ensure control responsibilities, attestations, issue management, and governance artifacts are applied consistently and remain fit for purpose.