Senior Specialist - CyberSecurity

Role Description Role Title : AI - Threat and Control Assessment Specialist Primary Skill : Threat & Control with Gen.AI, Risk & Control Mgt Role Name AI Threat and Control Assessment Specialist Key Responsibilities Perform expert level consultancy and threat and control assessments for core technologies such as GenAI Agentic and Public Cloud AWS AZURE GCP architectures Identify and assess AIspecific threats and control gaps in line with industry frameworks ie OWASP TOP10 Define and recommend AI security controls aligned to risk appetite Liaise with Developers Architects and other Technical Leads to understand the endtoend service and identify where there are any control gaps Provide technical security advice and guidance via the Cybersecurity Consultancy service Work with the CSAT management team to enhance the Threats and Controls Assessment Service Provide supervision guidance and mentor less experienced members of the global team Act as a point of contact and source of advice on issues relating to Cybersecurity within the team What you will bring to the role To be successful in this role you should have proven experience within the Technology sector with knowledge of the following skills Mindset Curiosity to explore how AI changes the threat landscape and a pragmatic approach to balancing innovation with responsible risk management Comfort working with ambiguity in fast moving AI technology while still driving clear control outcomes and decisions An inquisitive approach always asking how to achieve goals in a smarter and more effective way An ability and interest to learn and experiment with new approaches to vulnerability management in different contexts across the amazing scale that HSBC brings Stay up to date within the industry of new trends and best practices Good Risk and Controls understanding Experience assessing risk for GENAI and Agentic systems including privacy data governance and model risk considerations eg explainability drift misuseabuse Working knowledge of AI security threat frameworks and testing approaches IE OWASP TOP10 for LLMs Knowledge and exposure of Risk and Control Management Ability to understand and assess both threats controls and vulnerabilities articulating these to both technical and business stakeholders Knowledge of different frameworks and methodologies including Threat Modelling using STRIDE and the MITRE ATTCK Framework Desirable to have one or more industryrecognised cybersecurityrelated certifications including CISSP CRISC CISM or Cloud Security Certifications Strong Technical background Handson understanding of common GenAI solution components including RAG Agentic frameworks and MCP serversgateways Expert level hands on knowledge in one or more of the main Cloud Service Providers Azure AWS or GCP Preferable to have real world experience in assessing AI security within the CSPs Familiarity with AI security testing techniques such as prompt injections jailbreak testing and poisoning Proven experience in general security concepts and principles and application specific security concepts and principles Proven experience working in a large scale multinational and technologically diverse environment Hands on experience with threat modelling and strong technical understanding and experience of assessing vulnerabilities and identifying weaknesses in diverse enterprise IT assets Strong understanding of Software Development Life Cycle SDLC with a focus on security Knowledge and experience with network host and application security practices Understanding of emerging technologies and corresponding security threats Strong stakeholder management and communications skills Experience of working in international and diverse environments Experience in engaging with business technology regional and regulator stakeholders Ability to communicate to executive leadership effectively translating technical gaps into business risk Ability to prepare concise presentations and updates for senior management Interpersonal Skills Influential credible and persuasive active listener embraces HSBC Values shows good judgement and demonstrates high level of communication skills in order to achieve effective stakeholder management .