Functional Description

Our GCIO organisation plays a critical role for the bank. This team partners with our businesses to build the platforms, systems, and products that our customers use every day. This team keeps peoples money and data safe, and is at the forefront of driving innovation for our businesses, customers, and colleagues.

People Responsibility

No

Reports To

Chief Information Security Officer (CISO)

Role Purpose (1-2 sentences)

Lead the Cybersecurity function in Taiwan to protect the banks information assets and technology environment by managing cyber risks, ensuring compliance with HSBC security standards and regulatory requirements, and strengthening the organizations cyber resilience.

Job Contents

• Lead and coordinate cybersecurity operations, incident response, and threat management across the organization.
• Ensure compliance with HSBC Cybersecurity policies, local regulatory requirements, and audit expectations.
• Provide cybersecurity expertise and guidance for technology initiatives, projects, and emerging security risks.
• Drive security governance across network, infrastructure, applications, and data protection controls.
• Manage stakeholder engagement with business, regional/global Cybersecurity teams, regulators, and senior management.
• Oversee security monitoring, risk assessment, vulnerability management, and remediation activities.
• Support cryptographic key management, PKI, digital certificates, and security control implementation where applicable.
• Continuously enhance the organizations cybersecurity capability through process improvement, knowledge sharing, and best practices.

Qualification Requirement

• Bachelors degree or above in Information Technology, Cybersecurity, Computer Science, or a related discipline.
• 9+ years of experience in Cybersecurity, including management and operational security experience.
• Strong knowledge of cybersecurity governance, risk management, security operations, and regulatory compliance.
• Experience working with financial institutions and Taiwan regulatory requirements is preferred.
• Professional certifications such as CISSP, CISM, CISA, CEH, ISO 27001, SSCP, or CND are preferred.
• Strong stakeholder management, communication, and problem-solving skills with the ability to engage senior management and regulators.
• Knowledge of cryptography, PKI, digital certificate management, Hardware Security Modules (HSM), DLP, and information protection is an advantage.
• Fluent in both English and Traditional Chinese.