Data Loss Prevention (DLP) Analyst

If you’re looking for a career where you can make a real impression, join Global Service Center (GSC) HSBC and discover how valued you’ll be. HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.

We are currently seeking an experienced professional to join our team in the role of Data Loss Prevention (DLP) Analyst.

Role Purpose:

Global Cybersecurity Operations (GCO) provides a coordinated suite of “Information & Network Defence” services responsible for detecting and responding to information and cybersecurity threats to HSBC assets across the globe. This includes dedicated functions for the Monitoring of potential data loss events within the global estate as well as Information Protection Incident Management and Response. These two principal functions are supported by additional internal GCO capabilities in: Cyber Incident Monitoring & Response, Cyber Intelligence and Threat Analysis, Security Sciences and Client Engagement and Support Services. Critical to the success of GCO is its close partnership with sister Cybersecurity teams, IT Infrastructure Delivery, and Global Business and Function clients. The overall GCO mission is placed under the purview of the Group Chief Information Security Officer (CISO).

The Information Protection Monitoring and Response (IPM&R) will act as a strategic response function across the Group on a 24x7x365 basis where existing Information Security controls fail. This function is charged with efficiently and effectively handling Data related incidents resulting from high severity events and confirmed incidents. The objective is to ensure containment of the issue whilst maintaining close liaison with relevant internal and external parties ensuring an effective risk treatment plan is in place. This mission is critical to the protection of HSBC customers, the HSBC brand, shareholder value as well as HSBC information and financial assets.

Main Activities:

• The Data Loss Prevention Analyst is accountable for:
• Monitoring and protecting HSBC Internal, Restricted, and Highly Restricted data in relation to the global DLP monitoring & quarantine tool.
• Following detailed processes and procedures in security incident response lifecycle and its phases.
• Handling an acceptable volume of data events ensuring that the task is analysed thoroughly, and a correct resolution is provided and recorded in the tool within suggested OLA.
• Managing the response to and/or escalating DLP events with local and regional DLP staff, regional teams, and the Information Protection Response (IPR) team to assist with risk assessment and remediation processes.
• Providing 24/7 availability of Support for any critical investigations and support for the global DLP monitoring tool.
• Supporting handovers to other teams and countries at the start and end of the working shift.
• Coordinating the actions of multiple business units during the response to DLP events and incidents.
• Adhering to HSBC internal risk and compliance processes and standards.
• Cultivating strong relationships with organisationally important global Business stakeholders whose support and knowledge are vital in delivering the remediation of DLP events and incidents.
• Providing timely and relevant updates to appropriate stakeholders and decision makers during DLP events.
• Collaborating with the wider Cybersecurity (and IT) teams.
• Maintaining DLP metrics including the identification and development of relevant key data and appropriate reporting mechanisms to ensure accuracy for report management.
• Maintaining a strong awareness of regulatory trends, legislation and industry best practice relating to DLP and Identifying and developing new ideas to enhance our DLP monitoring and response capability.
• Supporting engagement in support of HSBC Global Businesses and Functions to drive a global up-lift in cyber-security and information protection awareness.