Windows OS Security Engineer at HSBC Securities Services Luxembourg

Ciudad de México, , Mexico -

Full Time

Start Date

Immediate

Expiry Date

23 Jan, 26

Salary

0.0

Posted On

25 Oct, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Security, Cybersecurity, Windows Operating System, VBA, PowerShell, SIEM, Splunk, Data Loss Prevention, Cryptography, Encryption, McAfee, Configuration Baseline Management, Business Analysis, Communication, Interpersonal Skills, Problem Solving

Industry

Financial Services

Description

If you’re looking for a career where you can make a real impression, join Global Service Center (GSC) HSBC and discover how valued you’ll be. HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions. We are currently seeking an experienced professional to join our team in the role of Windows OS Security Engineer Role Purpose: This role is responsible for supports a number of technologies and services across a globally dispersed team. This includes Windows, Cryptography and Encryption technology, Data Loss Prevention, Security Infrastructure and Vulnerability Management. Main Activities: This role will carry out some or all the following activities: Technical security standards management – Ensure Windows technical security standards are reviewed and maintained. Process and procedure management - Ensure all Windows Cybersecurity processes and procedures are maintained. Internal control assurance – Manage the reviewing, gathering of evidence and reporting on effectiveness of Windows controls. Risk and audit issue management – Ensure regulatory, risk and audit issue mitigation actions against Windows are actioned within agreed timescales and periodic reporting of such is maintained. Provide consultancy to projects to ensure compliance with HSBC security standards. Evaluate security solutions proposed by project teams. Evaluate software packaging requests in line with security standards. Evaluate GPO change requests in line with security standards. Supporting compliance reporting across the Windows domain. Supporting the establishment of HSBC as a valued contributor to information sharing efforts across the industry that helps to drive a positive image of the bank with our peers and regulators in the markets we serve. Supporting a “self-critical” culture whereby identification of weaknesses in the bank’s control plane (people, process and technology) are brought to light in an effective manner and addressed. Supporting a culture of individual self-improvement, whereby staff are expected to maintain subject matter expertise within their area of focus and within the realm of cybersecurity more broadly. Supporting engagement of Global Businesses and Functions everywhere HSBC does business, that drives a global up-lift in cybersecurity awareness, helping to “tell the story” of HSBC Cybersecurity efforts. Supporting engagement within the Lines of Defence Risk Management framework adopted by HSBC, to ensure complete transparency and effective working relationships across all lines of defence. Train, develop and mentor less experienced analysts. Branding and Communications – increasing exposure across the function including presentations for the Heads of Functions Qualifications Required: Mandatory: Formal education in Information Security, Cybersecurity, Computer Science or similar and/or commensurate demonstrated work experience Industry qualifications (CISSP, CISA, CISM). Excellent technical knowledge and security management of Windows Operating System essential Security Information and Event Management (SIEM) knowledge desirable – Splunk knowledge preferred VBA and PowerShell scripting Familiarity with SharePoint, Confluence and JIRA McAfee product set experience preferred – including ENS, Drive Encryption and Application Control (Solidcore) Desired Configuration Baseline Management experience desirable but not essential Lenguage Level: English level – B2 conversational Competencies Resourceful problem solver. Business Analysis skills. Self-motivated. Highest ethical standards and values. Good understanding and knowledge of common industry cyber security frameworks. Excellent communication and interpersonal skills with the ability to produce clear and concise reports for targeted audiences across internal and external stakeholders. Due to the urgent hiring need, candidates with immediate right to work locally and no relocation need will be prioritised. At HSBC we offer our colleagues a greater number of leave days so that they can fully enjoy their wedding, take care of the new member of the family, or grieve the loss of a family member. Our paid leave package is at the forefront in Mexico, now you have one more reason to be HSBC and proudly live a culture of well-being, balance, and care. HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website. ***Issued By HSBC Electronic Data Process Mexico Private LTD***

Responsibilities

The Windows OS Security Engineer is responsible for managing technical security standards, processes, and internal controls related to Windows systems. They will also provide consultancy to projects, evaluate security solutions, and support compliance reporting.