HSBCJP00057775 (Cybersecurity) CRYP Senior Controls SME

Senior Controls SME – Cryptography

Location: Kraków (hybrid – 6 days per month from the office)

About the Role

We are looking for a Senior Controls SME (Cryptography) to join a global cybersecurity function responsible for protecting critical systems, data, and services at scale. This role sits at the intersection of technology, risk, and governance, supporting the design, implementation, and continuous improvement of cryptography-related controls across a complex enterprise environment.

You will play a key role in ensuring that security controls are effective, compliant, and aligned with regulatory expectations, while collaborating with stakeholders across technology, risk, audit, and business teams.

Key Responsibilities

• Risk & Controls Management

  • Maintain alignment of cryptography controls with the enterprise risk framework

  • Assess control effectiveness and support remediation plans

• Controls Governance

  • Review and update control documentation, processes, and governance artefacts

  • Support control lifecycle activities including assessments and issue management

• Continuous Monitoring

  • Evaluate and enhance monitoring processes and control effectiveness metrics

  • Collaborate with control owners to ensure controls remain fit for purpose

• Stakeholder Management

  • Act as a key point of contact for internal stakeholders including security, audit, and risk teams

  • Respond to queries, reviews, and regulatory challenges

  • Translate complex technical topics into clear, business-friendly communication

• Reporting & Compliance

  • Manage and improve performance metrics (e.g. KCIs, risk indicators)

  • Ensure alignment with regulatory standards and industry best practices

• Cross-Team Collaboration

  • Work closely with cybersecurity, engineering, and business teams

  • Drive knowledge sharing and alignment across control domains

• Training & Awareness

  • Support the development of training materials and awareness initiatives related to cryptography controls

Requirements

• Technical background in IT, cybersecurity, or related field (cryptography knowledge is a strong plus or willingness to learn quickly)

• Experience in risk, controls, governance, or cybersecurity environments

• Strong communication skills – ability to explain complex technical concepts to non-technical stakeholders

• Proven stakeholder management experience, including working with senior audiences

• Ability to work across cross-functional teams and drive alignment

• Strong analytical and problem-solving skills, especially in governance and process improvement

What We Offer

• Opportunity to work in a global, high-impact cybersecurity function

• Exposure to complex systems and enterprise-scale environments

• A role combining technology, risk, and stakeholder engagement

• Flexible hybrid model with 6 days per month in the Kraków office