US Cyber Regulatory Program Manager

$120,000 - $222,500/Yr

HSBC - Buffalo, NY

Full-time - Mid Level

Buffalo, NY

Credit Intermediation and Related Activities

About the position

The US Cyber Regulatory Program Manager is primarily responsible for supporting the US Chief Information Security Officer (CISO) in providing regulatory support by coordinating the US FFIEC Cybersecurity Assessment & Exam and US GLBA programs, as well as other regulatory examinations as required. The key responsibilities include managing the programs to include development and maintenance of procedures, providing status reports to various levels of management, producing required artifacts in support of these programs, and developing training materials and supplemental documentation. The role is expected to manage the cybersecurity assessment responses, collaborating with other cybersecurity team members within the region, the central global functions of Group Cybersecurity, virtual team (PODs), technology teams, information security control owners, non-cyber control owners, and the regional/ business Chief Controls Office to achieve their goals. The role requires building of strong internal and external relationships and operating with transparency and consistency.

Responsibilities

• Lead the HSBC FFIEC CAT, or equivalent, program, including coordination of responses as well as ensuring efficient, accurate submissions.
• Coordinate and ensure accurate and complete assessment of GLBA requirements and subsequent delivery of the GLBA Report to the Board of Directors.
• Partner with internal stakeholders to develop, improve, and document the processes.
• Develop and maintain program documentation, such as policies, procedures, and templates.
• Develop and maintain training to support execution of the programs and meet regulatory requirements.
• Produce reporting and papers on status of the programs as well as their outcomes.
• Assist with other US regulatory examinations and audits as needed, including gathering evidence and responding to inquiries.
• Prepare and deliver clear and concise reports on cybersecurity risks, compliance status, and program updates to various stakeholders including senior management, the board of directors, and regulatory bodies.
• Stay abreast of emerging cybersecurity threats, vulnerabilities, and regulatory changes.
• Proactively identify opportunities to improve the effectiveness of the cybersecurity program.

Requirements

• Minimum bachelor's degree and/or experience in working in risk, governance or regulatory reporting is required.
• One or more industry-recognized cybersecurity-related certifications required, such as CISA, CISM, CISSP, CRISC.
• Strong, demonstrated program management acumen and experience; ability to coordinate multiple complex tasks across an international group of stakeholders.
• Excellent spoken and written communication, and ability to adapt style based on audience.
• Ability to efficiently operate and manipulate large data sets in excel.
• Experience contributing to the implementation and monitoring of policies, governance frameworks, procedures, practices and standards preferred.
• Positive and professional attitude; team player; flexible, adaptable, and open to change.
• Confident and takes responsibility and ownership for work and personal development.
• Ability to communicate technical subject matter to non-technical stakeholders.
• Ability to quickly develop effective working relationships with stakeholders, and manage same.
• Ability and self motivation to learn quickly.
• Utmost attention to detail in the work product is essential.

Nice-to-haves

• Desirable, but not essential, is experience in one or more areas of risk management or audit.

Benefits

• Competitive pay and benefits package including a robust Wellness Hub.
• Tailored professional development opportunities.
• Industry-leading volunteerism policy.
• Generous matching gift program.
• Comprehensive program of immersive Sustainability and Climate Change Initiatives.