Functional Description

Our GCIO organisation plays a critical role for the bank. This team partners with our businesses to build the platforms, systems, and products that our customers use every day. This team keeps people’s money and data safe, and is at the forefront of driving innovation for our businesses, customers, and colleagues.

People Responsibility

No

Reports To

Chief Information Security Officer (CISO)

Role Purpose

Provide cybersecurity expertise in Taiwan to protect the bank’s information assets and technology environment by managing cyber risks, ensuring compliance with HSBC security standards and regulatory requirements, and strengthening the organization’s cyber resilience.

Job Contents

• Coordinate cybersecurity operations, incident response, and threat management across the organization.
• Ensure compliance with HSBC Cybersecurity policies, local regulatory requirements, and audit expectations.
• Provide cybersecurity expertise and guidance for technology initiatives, projects, and emerging security risks.
• Support security governance across network, infrastructure, applications, and data protection controls.
• Manage stakeholder engagement with business, regional/global Cybersecurity teams, regulators, and senior management.
• Support security monitoring, risk assessment, vulnerability management, and remediation activities.
• Support cryptographic key management, PKI, digital certificates, and security control implementation where applicable.
• Contribute to enhancement of the organization’s cybersecurity capability through process improvement, knowledge sharing, and best practices.

Qualification Requirement

• Bachelor’s degree or above in Information Technology, Cybersecurity, Computer Science, or a related discipline.
• 9+ years of experience in Cybersecurity, including management and operational security experience.
• Strong knowledge of cybersecurity governance, risk management, security operations, and regulatory compliance.
• Experience working with financial institutions and Taiwan regulatory requirements is preferred.
• Professional certifications such as CISSP, CISM, CISA, CEH, ISO 27001, SSCP, or CND are preferred.
• Strong stakeholder management, communication, and problem-solving skills with the ability to engage senior management and regulators.
• Knowledge of cryptography, PKI, digital certificate management, Hardware Security Modules (HSM), DLP, and information protection is an advantage.
• Fluent in both English and Traditional Chinese.