Engineering & Delivery Lead - Risk & Compliance Technology - HSBC

Ready to strengthen production resilience for Risk Controls and Regulation Management platforms?

HSBC is one of the largest banking and financial services organisations in the world. Guided by our purpose of opening up a world of opportunity, our ambition is to become the world's most trusted bank globally, putting customers at the heart of everything we do.

Based in London, this Director level role sits within Group Functions Technology in Risk and Compliance Technology and reports to the R&C Risk Stewardship Enabler Value Stream Technology Lead. You'll own engineering outcomes for Risk Controls Assessment (RCA) and Regulation Management service management capabilities across a secure, resilient and scalable product and service portfolio. Working closely with Risk stakeholders and Value Stream-aligned DevSecOps teams you'll translate business and regulatory priorities into engineerable product outcomes with clear ownership from architecture and backlog through build, release and run. Success means improved production stability and service resiliency across the estate alongside a strong technology control environment aligned to HSBC standards and regulatory expectations. You'll set modern software delivery ways of working across teams and keep delivery focused on measurable improvements in time-to-market, operational efficiency and risk outcomes. The role involves a wide stakeholder network across Global Risk, Compliance, Procurement, regional technology teams, vendors, Group Functions Technology and Infrastructure.

• Own the timely delivery of the RCAs and Regulation Management book of work against agreed milestones and outcomes
• Oversee engineering delivery across the full lifecycle from discovery and architecture through build, test, deployment, production support and continuous improvement
• Embed Agile product delivery with prioritised outcome-led backlogs, effective sprint ceremonies, regular working software demos and frequent business feedback
• Champion DevSecOps and modern SDLC practices including trunk-based development, automated testing, CI/CD, deployment automation, infrastructure as code, observability and secure coding
• Provide hands-on engineering direction across architecture, code quality, APIs, data flows, deployment pipelines, operability, resilience and technical debt
• Strengthen a "you build it, you run it" approach with clear ownership of reliability, controls, incident learning, production observability and service automation
• Establish governance and control processes with DevSecOps teams to improve stability and resiliency across the production estate
• Produce production health and control reporting including OKRs, KCIs and KPIs to highlight risk hotspots and prioritise continuous improvement