Job Description

If you're looking for a career that will help you stand out, join HSBC, and fulfil your potential - whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.



HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.



We are currently seeking an experienced professional to join our team in the role of Head of Vendor Management, Cybersecurity.



The GCIO COO function operates as the backbone of the GCIO organisation, taking ownership and accountability for all operational aspects to ensure a seamless running of the GCIO business to exceptionally high standards. Aligned to the overall HSBC business structure, focused on continuous improvement and simplification to support GCIO to a consistent high quality, GCIO COO acts as a key enabler to the firm's ambition to 'be the most trusted bank globally, putting customers at the heart of everything we do'.



This role is part of the COO Vendor Management pillar which aims to manage all GCIO/ Technology vendors in a consistent and best practice manner. Vendor Management's goal is to create a consistent and structured approach to managing technology vendors throughout their lifecycle - from selection to renewal or exit - maximising value, addressing risk, and aligning performance with business goals.



The role holder will be responsible for Cybersecurity's end to end Vendor Management, working in tandem with the GCIO COO central Vendor Management team for strategy & best practice, and partnering closely with Procurement and Risk functions across all stages of the Vendor lifecycle.



As an HSBC employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution.

In this role you will:

Deal Initiation

Ensure alignment of key parties to agree objectives and support the development of the Tech/Business strategy to deliver. Ensure both a vertical and horizontal view is considered through value streams and co-design structures so that services are not duplicated and that there is a cohesive strategy around our service providers and tooling - this will need to happen for not only new deals but also with the current landscape of providers. Provide 3rd party requirements to procurement. Analyse options and support the development of Business Cases. Review, plan and prioritise funding options across Run, Change and other portfolios.

Negotiation & Contracting

P&L development and business case updates. Confirm financial, workforce and recharging model. Support Procurement with commercial negotiation, assessment, and deal structuring.

Approvals & Execution

Confirm contract meets requirements, including funding and P&L impact. Ensure pre-contract TPEM tasks complete. Manage Third Party Spend (TPS) approval process. Support approval briefings, incl. COO, Finance and Tech. Update forecasts and manage budget/funding and workforce requirements. Submit and/or manage Purchase Orders.

Post Execution

Validate benefit claims. Manage financial, workforce and recharging requirements (including forecasting, invoicing, global contract distribution and balance sheet). Refresh objectives and strategy review at agreed date - with sufficient time prior to the next negotiation period so that we can lock in on any new or changed requirements or needs. Oversight of Third-Party Engagement Management (TPEM) tasks completion, vendor performance, and all associated risk management

Leadership & Teamwork

Active and engaged member of the Cybersecurity Operations Director leadership team Active and engaged member of the GCIO Vendor Management Pillar working group Chair Cybersecurity Vendor Management Meetings Lead and manage Cybersecurity Vendor Management team

To be successful in this role you should meet the following requirements:

Strong understanding of Technology operational management requirements for banks and knowledge of the external environment - regulatory, political, competitor and market Ability to translate technology strategy and align and manage accountabilities accordingly Experience of managing within a complex matrix environment Deep financial and commercial awareness Demonstrable experience in managing significant vendor management initiatives, with a track record of driving results in complex, matrixed organisations Ability to manage and mitigate operational risk effectively Proven Ability in maintaining long term relationships with highly critical stakeholders internally and externally Strong analytical and problem-solving skills, with the ability to synthesize complex information and make data-driven decisions to drive business outcomes


This role is based in Sheffield.



Opening up a world of opportunity


Being open to different points of view is important for our business and the communities we serve. At HSBC, we're dedicated to creating diverse and inclusive workplaces - no matter their gender, ethnicity, disability, religion, sexual orientation, or age. We are committed to removing barriers and ensuring careers at HSBC are inclusive and accessible for everyone to be at their best. We take pride in being a Disability Confident Leader and will offer an interview to people with disabilities, long term conditions or neurodivergent candidates who meet the minimum criteria for the role.



If you have a need that requires accommodations or changes during the recruitment process, please get in touch with our Recruitment Helpdesk:


Email: hsbc.recruitment@hsbc.com


Telephone: +44 207 832 8500