Job Description

If you’re looking for a career where you can make a real impression, join our Global Service Center (GSC)- HSBC and discover how valued you’ll be.

We are currently seeking an experienced professional to join our team in the role of GCIO Chief Control Office (CCO)

The GCIO Chief Control Office (CCO) team plays an important role in enabling the bank to operate within its risk appetite by ensuring efficient and effective risk and control management. We do this by providing operational risk and control expertise, specialist technical knowledge and a deep understanding of the businesses and functions we serve.

Our relationships with our Regulators are critical to HSBC’s business. As a Regulatory Engagement Specialist, you will develop deep subject matter expertise in a specific control or control family within Cyber, Technology or Data. You will contribute this expertise to drafting, reviewing and shaping complex regulatory responses. This role will suit individuals who enjoy how controls operate in detail and translating that knowledge into clear, authoritative regulatory submissions.

About the Job

In this role, you will support the delivery of responses to regulatory requests for information by providing detailed insights into how controls, processes and systems operate within your domain. You’ll grow specialise expertise in on or more controls or control families, developing the depth of understanding needed to contribute confidently to regulatory responses.

You will work closely with the Regulatory Engagement Specialist Lead for your domain, control teams, subject matter experts, risk stewards, and market Single Point of Contacts (SPOCs). You will help interpret regulatory questions, gather detailed evidence of control design and operation, ensure responses are technically accurate, well-structured and aligned with regulatory expectations.

What you’ll do (Key Responsibilities)

• Support or drive strategic development of the capability and services of the Regulatory team
• Build and maintain deep knowledge of specific controls or control families within your domain (Cyber)
• Contribute to complex regulatory responses, explaining how controls are designed, operated, evidence and governed
• Interpret regulatory questions to identify the underlying control themes, processes, systems or risks involved
• Work with control owners and SMEs to obtain detailed input, clarifications and supporting evidence
• Draft, review and refine sections of responses to ensure technical accuracy and clarity
• Support peer reviews and apply quality checks as part of embedded quality assurance tollgates
• Identify potential gaps or inconsistencies in information and escalate appropriately
• Support the development of reuseable content and contribute to the regulatory engagement knowledge base.
• Track emerging regulatory themes related to your control area
• Ensure evidence and documentation is stored correctly in the respective market repositories and workflow tooling.

What you’ll need to succeed

Essential Skills & Experience

• Ability to engage, challenge, and secure decisions from senior Technology, Risk, Compliance, and senior stakeholders balancing regulatory requirements with delivery priorities
• Strong knowledge of applicable regional cyber and technology regulations and supervisory expectations
• Knowledge of Cyber controls, or experience working closely with control owners or SMEs
• Strong evidence drafting or reviewing complex regulatory responses, audit materials, or assurance documentation
• Ability to translate technical concepts into clear, structured regulatory responses
• Experience contributing to audit, assurance or regulatory engagements
• High attention to detail and commitment to accuracy
• Excellent written communications skills and the ability to challenge inconsistencies or unclear information
• Strong collaboration skills, with confidence in engaging SMEs and cross-functional teams
• Demonstrates sound judgement, confidentiality, and a strong sense of accountability; able to make balanced, defensible decisions under pressure
• Ability to manage multiple in-flight, multiple stakeholder engagements in a fast-moving environment in a structured and organised way.

Desirable Skills / Certifications

• Experience in technology risk, cybersecurity or data governance in financial services
• Familiarity of risk and control frameworks and industry guidelines relevant to your domain (e.g. NIST, COBIT, ISO 27001, ITIL)
• Prior involvement in regulatory engagement or evidence preparation
• Certifications aligned to specialist domains such as:
  • Cyber: CISSP, CISM, CRISC, CEH, CRISC

You’ll achieve more when you join HSBC!

At HSBC we offer our colleagues a greater number of days so that they can fully enjoy their wedding, take care of the new member of the family, or grieve the loss of a family member. Our paid leave package is at the forefront in Mexico, now you have one more reason to be HSBC and proudly live a culture of well-being, balance and care

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

***Issued by HSBC Electronic Data Processing (México) Private LTD***