Project manager - Cybersecurity

Role & responsibilities

• Proven track record of project managing IT DR, Production Stability and/or Operational Resilience solutions simultaneously in complex organisational environments.
• Ability to work in a fast-paced environment with changing priorities and flexible workload management.
• Domain Expertise: Proven track record of delivering change in a complex, regulated financial environment, including strong awareness of technical infrastructure and applications. This may include familiarity with IT / DR recovery concepts, and ability to understand SME discussions and report them correctly.
• Stakeholder Negotiation: Liaise with various Cyber ITSOs/BAOs to agree on solutions and outcomes to meet new requirements/standards (e.g. new Disaster Recovery Time Objectives set by the TRCB CTO).
• Ability to support aggressive delivery timelines without compromising quality.
• SME Support: Engage & consult with controls owners/SMEs but be prepared to run with the follow-up and execution independently.
• Attend governance forums and provide programme insight to the ExCo and Steering Committees.
• Proactively manage delivery risks, issues and dependencies; articulate cross-programme impacts.
• Resolve issues and initiate corrective actions were required to keep delivery on track.
• Act as the main point of contact for stakeholders and maintain a clear delivery narrative.
• Contribute to and agree business transition plans including handover criteria, ensuring final activities are completed before handover to BAU.
• Experience managing communications with diverse stakeholders including HSBC senior exec, control owners/smes, ITSO & ITSO delegates, support teams, and ability to resolve technical queries in a timely manner.
• Confidence to facilitate escalations to senior management when required.
• Drive action plans to achieve required cyber/resilience metrics with ITSOs; schedule follow-ups and circulate actions post-call.

Delivery & governance

• Governance & Meeting Leadership: Attend and facilitate the Production Stability Working Group and Sync-up calls.
• SME Coordination: Attend relevant Project Working Groups supported by Cyber SMEs for each project. Capture minutes and ensure actions are tracked and closed.
• RAID Management: Maintain a rigorous RAID log (Risks, Assumptions, Issues, Dependencies) to keep the Cyber Lead and Cyber Senior Management informed of delivery risks and challenges.
• Operational Resilience Reporting: Produce Operational Resilience Steering Committee & co-ordinate action plans with ITSOs (IT Service Owners) and report monthly non-compliance.
• Metrics & Tolerance: Provide Metric/GRAS % to tolerance calculations for controls inputs into the Resilience Committee.
• Project Tracking: Maintain and report project status within Clarity for all Production Stability and new Capacity Management Theme projects, including ad-hoc reporting as required to demonstrate project health.
• Action Plan Execution: Drive action plans to achieve GRAS metrics with ITSOs; schedule follow-up calls and ensure clear actions are circulated post-call.
• Apply effective project governance, quality assurance and risk management with strong documentation.
• Maintain and report status in delivery tooling (e.g.Clarity) for Production Stability and Capacity themes.
• Highly proficient in Excel, PPT and WORD i.e. VLOOKUPs, pivot tables, automation & PowerPoint slides for Exec reporting.

Nice to have(s):

• Experience working in large financial institutions with complex systems and processes.
• Technical Awareness:  SME is not required for this role, but it is essential you must have a strong awareness of technical cyber operational resilience, infrastructure and applications terminology and understanding.
• Recovery Concepts: Familiarity with IT/DR Recovery concepts and language is required to understand and document technical discussions accurately.
• Resilience & Pushback: Ability to withstand challenge from stakeholders and ability to drive the discussion with Cyber ITSO’s to ensure compliance and stability goals are met.
• Communication: Ability to summarise technical updates into business-friendly language for senior management and ExCo reporting.