Head of Cybersecurity Risk Quantification

If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be.

HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.

We are currently seeking an experienced professional to join our team in the role of Head Of Cybersecurity Risk Quantification.

The Head of Cybersecurity Risk Quantification will form part of the CSA Data Insight & Visualisation Team, joining a global team of data engineers, data visualisation professionals’ analysts from diverse backgrounds. As Head of Cybersecurity Risk Quantification at HSBC you will play a critical role in shaping our cybersecurity strategy, partnering with key stakeholders across IT, operations, compliance, and risk management.

The Head of Cybersecurity Risk Quantification will be responsible for leading our cybersecurity risk quantification initiatives, ensuring that the organization’s risk posture is clearly understood, measurable, and actionable. You will apply cutting-edge probabilistic risk assessment methodologies, lead a talented team of risk professionals, data scientists, threat hunters and data engineers, and drive the development of innovative risk models that enhance our ability to forecast and mitigate cybersecurity risks.

As an HSBC employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution.

In this role you will:

• Lead and mentor a high-performing, multidisciplinary team of cybersecurity risk professionals, including data scientists, threat hunters, and data engineers.
• Collaborate with executive leadership to integrate quantitative risk insights into enterprise risk management frameworks and decision-making processes.
• Present findings and recommendations to senior leadership in a clear, data-driven manner.
• Act as a key advisor to the regional and business lines on emerging cybersecurity risks and their quantifiable impacts.
• Oversee the integration of diverse datasets (threat intelligence, financial data, logs etc.) to enhance risk assessment accuracy.
• Supervise the development and optimization of Python-based libraries and tools for cybersecurity risk modelling.
• Design and implement probabilistic risk assessment models to quantify cybersecurity threats, vulnerabilities, and impacts on the organization using advanced statistical techniques.

To be successful in this role you should meet the following requirements:

• Leadership experience with a proven track record of mentoring and growing technical teams, with extensive experience in quantitative risk modelling in a regulated industry or in actuarial sciences.
• Proven experience in quantitative modelling of non-financial risks, using probabilistic risk assessment techniques such as decision trees, fault trees, Bayesian Networks, Markov Decision Processes (MDPs) and Structured Scenario Analysis including Monte Carlo simulations or similar.
• Hands-on experience in developing decision analysis models.
• Strong experience in developing complex numerical solutions using Python, with advanced statistical and data analysis skills are essential.
• Proven experience in deploying Machine Learning models into production, with strong familiarity with best MLOps practices.
• Hands-on experience with data engineering tools preferably Spark, Lakehouse architecture, and Databricks with a good knowledge of software engineering processes.

This role is based in Sheffield, other UK locations including Birmingham will be considered