Job title: Associate Director, Data and Analytics
The mission of HSBC’s global cyber enabled fraud team (CEFT) is to conduct investigations of cyber fraud actions to inform, educate, and advise HSBC on current threats. Through continuous learning and participation in internal and external engagements, CEFT empowers decision makers, emboldens defences, and weakens our cyber adversaries.
In the role of CEFT Principal Analyst, you will be responsible for:
-
Monitoring the global cyber threat landscape using open-source intelligence, commercial datasets, participation in industry and government information-sharing forums, and trusted professional networks.
-
Translating complex technical insight and digital evidence into actionable anti-fraud controls and clear, business-focused recommendations with Leading the design and implementation of mitigation strategies to reduce the likelihood and impact of emerging threats.
-
Identifying opportunities for automation and orchestration to maximize the efficiency and consistency of threat intelligence collection, analysis, and dissemination to internal stakeholders and external partners.
-
Building and enhancing HSBC’s internal capabilities by leveraging our global footprint to understand the latest tactics, techniques, and procedures (TTPs) used by advanced cyber-enabled fraud adversaries through direct observation and controlled interaction.
-
Participating in and supporting external engagements with industry partners, law enforcement, and the wider security community to strengthen collective defence and showcase HSBC’s leadership in protecting the bank and its customers from cyber-enabled fraud.
-
Promoting a constructive, self-critical culture where weaknesses across people, process, and technology are identified, communicated effectively, and addressed.
-
Supporting a culture of continuous development, ensuring team members maintain deep subject-matter expertise in their focus areas and broader cybersecurity trends.
-
Partnering with Global Businesses and Functions across HSBC to raise awareness, share insights, and help “tell the story”of HSBC’s cyber-enabled fraud efforts and outcomes.
-
Advising senior leadership on cyber-enabled fraud trends and best practice through active collaboration with industry, academia, and government.
-
Producing management information (MI) for the cyber-enabled fraud mission, tailored to the audience, grounded in data, and supported by expert analysis to enable informed decision-making.
In this role, you will:
Principal Accountabilities and Responsibilities (e.g., for Business, Customers and Stakeholders; internal control environment, etc.)
-
Lead the practice with high quality analytical, reporting, visualisation, AI & ML solutions for the business stakeholders across one of more regions
-
Design, architect and manage analytics processes and infrastructure and define initiatives with senior management
-
Supports innovative analytical thinking & solutions that results in improved business performance and Interface with business to increase awareness on how to leverage advanced analytics tools and techniques by business communities
-
Champions changes by partnering with Global / Regional leaders and establish analytics driven business model and standardize analytical methodologies and create iterative/ agile environment
-
Ability to navigate organizational complexities and drive collaboration to achieve shared objectives and to Embrace market / industry best practices and bring in best-in-class and relevant solutions for better business decisions
-
Responsible for planning and overseeing project and program level reporting with end-to-end management and monitoring of project governance and control and for carrying out ad-hoc projects under the direction of Department Head.
-
Establish quality standards in terms of timeliness of the projects and accuracy of the deliverables and deployments to Countries/Regions.
-
Owns delivery of high-quality modules for the business stakeholders across one of more regions and strictly adhere to the HSBC Core Values and leading by example as a role model & Brand Ambassador.
-
Strengthen modelling capability through a “modelling chapter” approach (standards, skills, community, and delivery excellence) for UK Customer and Drive responsible AI/ML and GenAI adoption, including coordination with AirCO for GenAI use case lifecycle governance.
-
Lead and strengthen model risk governance across the portfolio, ensuring models are appropriately identified, tiered, assessed for impact, and governed in line with regulatory expectations (including SS1/23).
Leadership & Teamwork
- Sees the 'bigger picture' and assesses relationships between recommended projects and business performance. Good understanding of business domain, functional goals.
-
Effectively engage in a matrix structure to drive transformation goals for the organization
-
Collaborate with leaders to drive usage of analytics services by various business communities
-
Build a culture committed to the delivery of outstanding customer service and open, transparent, honest team environment
-
Execute for results and build diverse teams
-
Develop and enhance the capability and expertise of the team by providing the effective coaching and on-job training (For People Manager role)
-
Define the objectives for the team/function in consultation with department Head and business stakeholders (For People Manager role)
-
The role holder shall also be expected to guide and lead team members from a functional perspective and help them build up a strong business understanding. (For People Manager role)
-
Strong expirence in developing ML models
-
Experience in model risk governance and model lifecycle management within financial services.
-
Exposure with AI use cases will be preferred
Management of Risk/Internal Controls/Compliance:
-
The jobholder will continually reassess the operational risks associated with the role and inherent in the business, taking account of changing economic or market conditions, legal and regulatory requirements, operating procedures and practices, management restructurings, and the impact of new technology.
-
The jobholder will also adhere to and be able to demonstrate adherence to internal controls. This will be achieved by adherence to all relevant procedures, keeping appropriate records and, where appropriate, by the timely implementation of internal and external audit points, including issues raised by external regulators.
-
The jobholder will implement the Group compliance policy by containing compliance risk in liaison with Global Head of Compliance, Global Compliance Officer, Area Compliance Officer or Local Compliance Officer. The term ‘compliance’ embraces all relevant financial services laws, rules and codes with which the business has to comply.
-
This will be achieved by adhering to all relevant processes/procedures and by liaising with Compliance department about new business initiatives at the earliest opportunity. Also and when applicable, by ensuring adequate resources are in place and training is provided, fostering a compliance culture and optimising relations with regulators.
To be successful you will:
Skills & Experience:
Qualifications
To be successful in this role you should meet the following requirements:
-
Highly developed research and analytical skillset, so you can work with large volumes of data and pinpoint statistically significant patterns related to cyber-enabled fraud threats.
-
Excellent investigative skills, insatiable curiosity, and an innate drive to win.
-
Instinctive and creative, with an ability to think like the adversary.
-
Developed external peer network for sharing intelligence.
-
Self-motivated and possessing of a high sense of urgency and personal integrity.
-
Highest ethical standards and values.
-
Understanding of the relationship between fraud controls, financial crime controls, and cybersecurity controls (how they complement each other; where gaps form).
-
Can identify new and effective methodologies to address cyber-fraud risks.
-
Guide, mentor, train and manage junior technical analysts.
-
Ability to speak, read, and write in English at an expert level.
Technical Skills
-
Knowledge and experience with various computer programming, scripting, and pattern matching languages (e.g., JavaScript, Yara, Python, Regex, etc.)
-
Demonstrable knowledge of cyber-enabled fraud typologies (e.g. account takeover, phishing and social engineering, MFA bypass, session hijacking, mule activity indicators, investments scams, etc.).
-
Ability to map cyber fraud activity across the customer journey and digital channels (web/mobile/contact centre where relevant): enrolment, authentication, payee setup, payments/transfer initiation, identifying where adversaries exploit weak controls.
-
Working knowledge of authentication and identity risk in a fraud context.
-
Strong familiarity with the fraud ecosystem:
-
How phishing kits, OTP bots, malware loaders, and initial access brokers enable downstream fraud,
-
How criminal marketplaces and “fraud-as-a-service” models influence TTP evolution, typical adversary tradecraft for evasion (rotation, proxy/VPN use, residential IPs, emulation).
-
Extensive experience with utilizing well known raw threat data sets and their application programming interfaces (APIs) to hunt for threats including post exploitation frameworks.
-
Extensive knowledge and demonstrated experience of common intelligence sharing platforms/protocols and experience operating within a collective defence environment, with internal stakeholders and external partners.
-
Excellent knowledge and demonstrated experience in analysis and dissecting advanced attacker tactics, techniques and procedures that informs adjustments to cyber enabled fraud controls.
Hsbc.com/careers
You’ll achieve more at HSBC
HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.”
Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.
***Issued By HSBC Electronic Data Processing (India) Private LTD***
