Head of Middleware Platform Security

Head of Middleware Platform Security Miejsce pracy: Kraków Technologies we use Expected JavaScript Node.js Oracle About the project Global Defense Engineering is responsible for fielding solutions that help defend HSBC against a wide range of threats to the business, customers, clients, partners, and staff. The team works in concert with partner teams across HSBC to implement novel defensive capabilities that are effective and adaptable against a constantly evolving threat landscape. The function operates under the vision: "Enabling HSBC to be safely successful everywhere the firm chooses to do business." Your responsibilities Define secure configuration baselines for middleware software, including but not limited to IBM WebSphere Application Server, IBM WebSphere Message Queue, IBM WebSphere Portal, IBM HTTP Server, Apache HTTP Server, Apache Tomcat, Oracle WebLogic Server, nginx Web Server, node.js JavaScript Web Server. Work with middleware technical subject matter experts to agree secure configuration baselines. Work with middleware technical subject matter experts to define/develop/implement checks for compliance scans. Work with middleware technical subject matter experts to provide remediation guidance for IT Service Owners. Work with the Configuration Baseline Management team to ensure they receive configuration compliance data. Interact with stakeholders across the organisation to understand their security needs and expectations. Define and maintain capability strategy, supported by Enterprise Architecture, Security Architecture and Control Owners, in response to business strategies, regulator expectations, technology and practice advancement, best practice, and threat actor evolution [will overlap with Architecture]. Ensure success with delivery partners (in alignment with support functions). Runs / drives respective Delivery forum, QBRs, SteerCos and Capability PODs. Our requirements Minimum 5 years' in-depth experience with multiple middleware technologies from the list of IBM WebSphere Application Server, IBM WebSphere Message Queue, IBM WebSphere Portal, IBM HTTP Server, Apache HTTP Server, Apache Tomcat, Oracle WebLogic Server, nginx Web Server, node.js JavaScript Web Server. Demonstrated experience with middleware platform security. Minimum 2 years' experience leading a technical team. Demonstrated understanding of and experience with Center for Internet Security (CIS) benchmarks. Strong stakeholder management skills, with demonstrated experience of understanding and meeting the needs of multiple stakeholders. Excellent communication skills, including the ability to translate complex technical concepts into business-friendly language. Customer-centric consultancy approach. Ability to manage budgets and allocate resources effectively. What we offer Competitive salary Annual performance-based bonus Additional bonuses for recognition awards Multisport card Private medical care Life insurance One-time reimbursement of home office set-up (up to 800 PLN) Corporate parties & events CSR initiatives Nursery discounts Financial support with trainings and education Social fund Flexible working hours Free parking Benefits sharing the costs of sports activities private medical care sharing the costs of professional training & courses life insurance remote work opportunities flexible working time integration events corporate sports team retirement pension plan corporate library no dress code coffee / tea parking space for employees leisure zone extra social benefits employee referral program opportunity to obtain permits and licenses charity initiatives family picnics extra leave In-office gym Recruitment stages Online assessment Phone interview Job interview Welcome to HSBC HSBC Service Delivery (Polska) Sp. z o.o. HSBC is one of the world's largest banking and financial services organisations. Our global businesses serve more than 40 million customers worldwide through a network that covers 63 countries and territories. HSBC Service Delivery (Polska) Sp. z o.o. is HSBC's global finance, operations, risk and technology centre. We use our unique expertise and capabilities to provide specialised services – our people range from technologists transforming the banking experience to operations professionals managing 1.7 trillion payments a year. Our Purpose – Opening up a world of opportunity – explains why we exist. We are bringing together the people, ideas and capital that nurture progress and growth, helping to create a better world – for our customers, our people, our investors, our communities and the planet we all share. Thank you for interest in HSBCBefore you apply, please note that we will take into the consideration only applications that include the following statement:."I hereby declare that I have familiarised myself with the Privacy Statement for Applicants published at http://www.about.hsbc.pl/careers and I give my consent to use my personal data included in my application for the purposes of recruitment in HSBC Service Delivery (Polska) Sp. z o. o. according to the rules described in the Privacy Statement for Applicants, as per the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).".Due to the high number of applications, we reserve the right to contact selected candidates onlyIn case you would like to resign from participation in the recruitment process or withdraw previously sent application, please email us at: krakow.recruitment@hsbc.com.