About the role
Responsibilities:
- Provide the Central PMO capability for the Cyber Resilience portfolio, managing multiple workstreams including Integrated Testing, Minimum Viable Services (MVS), Third-Party Resilience, cyber recovery, technology recovery, remediation, and assurance activities.
- Based in India, reports to Cyber Resilience leadership and works across global HSBC teams, including Cyber Security, Technology, Operational Resilience, Risk, Crisis Management, business areas, and third parties.
- Maintain an integrated portfolio and project plan covering severe-but-plausible cyber disruption scenarios, resilience testing, recovery activities, MVS outcomes, third-party dependencies, audit and assurance findings, regulatory commitments, priorities, milestones, resources, and governance.
- Provide a single, accurate view of delivery across all Cyber Resilience workstreams, including progress, risks, issues, dependencies, remediation status, decisions, resource impacts, and next steps.
- Translate cyber resilience objectives into requirements, work packages, deliverables, milestones, acceptance criteria, and implementation plans, using workshops to define service impacts, recovery needs, dependencies, ownership, and required change.
- Prepare clear, decision-ready slide packs and governance materials for senior management, steering committees, assurance teams, internal audit, and formal Cyber CTB PMO forums.
- Maintain governance calendars, agendas, action logs, decision logs, meeting records, and reporting cadence.
- Own the portfolio RAID log and remediation trackers, ensuring risks, assumptions, issues, dependencies, and actions are documented, assessed, assigned, aged, escalated, and closed with appropriate evidence.
- Apply HSBC change management requirements across project initiation, planning, approvals, stage gates, change controls, tolerances, reporting, and closure, supporting formal Cyber CTB PMO governance.
- Convert lessons from testing, incidents, audits, and assurance activity into prioritized improvement plans across recovery strategies, technical standards, architecture, service management, engineering practices, playbooks, and investment roadmaps.
- Work with subject-matter experts to ensure plans, trackers, and governance materials accurately reflect technical, business, regulatory, and third-party risks.
- Build effective relationships across cybersecurity, technology, operational resilience, risk, compliance, internal audit, business areas, and critical third parties.
- Communicate complex cyber, technology, and resilience matters clearly to technical, business, and senior management audiences, providing evidence-based recommendations and constructive challenges.
- Manage project budgets, costs, invoices, and financial commitments, coordinating with finance, procurement, and suppliers to ensure accurate billing, timely processing, and reporting of variances and financial risks.
- Produce a weekly PMO report covering delivery status, financial position, billing, invoicing, milestones, risks, issues, dependencies, remediation actions, decisions, resources, and upcoming activity.
- Maintain project documentation, financial records, and closure documentation in the approved SharePoint repository.
Requirements:
- Experience range: 8+ years.
- Strong project management and PMO experience in the banking sector or complex, global, and highly regulated organizations.
- Strong business analysis skills, including requirements gathering, process analysis, workshop facilitation, gap analysis, options assessment, and benefits tracking.
- Proven ability to create high-quality PowerPoint slide packs and governance materials for senior stakeholders.
- Strong experience managing RAID logs, remediation actions, dependencies, milestones, integrated plans, and trackers.
- Practical understanding of HSBC or equivalent enterprise change management, governance, and stage-gate processes.
- Excellent communication, analytical, and organizational skills, with the ability to simplify complex information and manage competing priorities.
- Ability to drive accountability, challenge constructively, and follow actions through to evidenced closure.
- Practical understanding of cybersecurity, technology resilience, operational resilience, cyber recovery, or related disciplines.
- Strong stakeholder management, influencing, facilitation, and escalation skills.
- Experience as a business analyst, project manager, manager, or PMO lead in a large, complex, regulated organization, preferably within banking or financial services.
- Experience supporting multiple workstreams, senior governance forums, audit or regulatory remediation, and formal change governance.
- Experience coordinating across cybersecurity, technology, risk, and operational resilience teams in a global or matrixed environment.
- Experience supporting cyber change and transformation Board governance, resilience testing, technology recovery exercises, critical business services, impact tolerances, or third-party resilience.