Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 80 days ago

Manager Cyber Security Governance and Controls (m/f)

HSBC Continental Europe, Luxembourg S.A.E.

Where
Luxembourg
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowManager Cyber Security Governance and Controls (m/f)HSBC Continental Europe, Luxembourg S.A.E. · Luxembourg

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on HSBC Continental Europe, Luxembourg S.A.E.'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 80 days ago

The posting

At HSBC, we're a trusted international organisation with a global customer base of around 39 million customers worldwide through a network that covers 62 countries and territories. In Europe, our ambition is to become the leading international wholesale bank and we need talent like you to help us meet our ambition. Whether you want a career that could take you to the top or in an exciting new direction-we offer opportunities, support and rewards that will take you further. The HSBC Group in Luxembourg is a significant employer and operates several businesses including asset management, securities services, private banking and corporate banking.By joining us, you'll help evolve and grow our IT function. What you will do: Reporting to the Head of IT and Cyber Security, you will support HSBC's Luxembourg operations by managing day-to-day cyber security governance and ICT control oversight. You will monitor the effectiveness of cyber/ICT controls, drive remediation of issues, and provide clear reporting to senior stakeholders. You will also support audit and regulatory engagement and contribute to operational resilience activities where cyber and ICT risks affect critical or important business services.In this role, you will (but not limited to):• Monitor and assess the effectiveness of cyber security and ICT controls (including maintaining appropriate documentation and evidence).• Identify control gaps and weaknesses, agree remediation plans with control and process owners, and track actions through to closure.• Support cyber/ICT risk activities such as risk identification, assessment, treatment tracking and reporting, working with Risk/Compliance oversight teams.• Produce governance reporting, dashboards and committee materials (control effectiveness, issues, metrics and key risk themes).• Coordinate responses to audit and regulatory requests, ensuring timely and high-quality evidence and management responses.• Contribute to operational resilience activities where cyber/ICT risks impact critical or important services (e.g., recovery readiness tracking and follow-up).• Drive continuous improvement in governance processes, reporting quality, and control monitoring (including standardisation and automation where appropriate).You should apply if you have: Essential experience and capabilities• Experience in cyber security governance, ICT risk management and/or control oversight in a regulated environment (financial services preferred).• Knowledge of recognised security and control frameworks (e.g., ISO/IEC 27001, NIST CSF, CIS Controls).• Strong stakeholder management skills and the ability to challenge constructively and influence without formal authority.• Excellent written and verbal communication skills, including producing senior/committee-grade materials.• Strong planning and prioritisation skills; the abillity to manage multiple deadlines with high attention to detail.• Fluency in English required; French and/or German is an advantage.Desirable• Familiarity with Luxembourg/EU regulatory expectations for ICT and cyber risk (including DORA and relevant CSSF circulars).• Understanding of operational resilience concepts and how cyber/ICT risk affects critical services.• Experience with GRC / issue tracking / evidence management tools (e.g., Archer, ServiceNow, Jira, SharePoint or equivalent).• Certifications such as CISSP, CISM, CCSP, CRISC (or equivalent).Even if you feel you do not meet 100% of our qualifications, we encourage you to apply, if you believe this role is right for you.What you'll get in return:The pay range for this role is EUR 96,200 - 110,000.HSBC operates multiple variable pay plans, to reflect the diverse nature of the businesses, roles and markets in which we operate. Variable pay is designed to reward colleagues for their individual performance and contribution, as well as the performance of their relevant Business / Infrastructure, and the overall Group.We offer a comprehensive and competitive package of benefits usually covering health support, life assurance, pension, and family friendly leaves, as well as many other benefits to support your wellbeing.HSBC has been certified “Top Employer 2026” in Europe. This recognition from the Top Employers Institute rewards our HR practices and recognises HSBC as an HR Leader in France, Germany, Italy, Ireland, Luxembourg, The Netherlands, Poland and Spain.If you're looking for a career where you will be respected as an individual and valued for the contributions you make, please visit our career page, and discover how diversity drives our success. Being open to different points of view is important for our business and the communities we serve. At HSBC, we're dedicated to creating diverse and inclusive workplaces. We are committed to removing barriers and ensuring careers at HSBC are inclusive and accessible for everyone to be at their best. If you have a need that requires accommodations or changes during the recruitment process, please let us know.Please note that every selected candidate will have to provide us with a valid criminal record check in due time.Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website. For any GDPR request, please send it to: <a href="mailto:[email protected]" rel="nofollow">[email protected]</a>For further information on building your career at HSBC, please visit: <a href="www.hsbc.com/careers" target="_blank" rel="nofollow">www.hsbc.com/careers</a> Discover how ‘We Value Difference'.

Posting text belongs to the employer. Removal requests: contact us.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against HSBC Continental Europe, Luxembourg S.A.E.'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on HSBC Continental Europe, Luxembourg S.A.E.'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    HSBC Continental Europe, Luxembourg S.A.E.'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.