Head of Public Key Infrastructure/Senior Lead Consultant Specialist

Some careers shine brighter than others.

If you’re looking for a career that will help you stand out, join HSBC, and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

HSBC is one of the largest banking and financial services organizations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realize their ambitions.

We are currently seeking an experienced professional to join our team in the role of Senior Lead Consultant Specialist  

In this role you will:

• The Head of PKI reports to the Digital Identity capability owner
• PKI Architecture & Design
• Lead the design and architecture of the bank’s PKI systems, ensuring they meet security requirements, industry standards, and compliance regulations.
• Develop and maintain PKI policies, standards, and procedures, including certificate lifecycle management, key management, and incident response.
• Implementation & Management
• Oversee the deployment, configuration, and maintenance of PKI infrastructure, including CAs (Certificate Authorities), RA (Registration Authorities), HSMs (Hardware Security Modules), and certificate management systems.
• Manage the integration of PKI with other security systems such as identity and access management (IAM), multi-factor authentication (MFA), and secure email systems.
• Security & Compliance
• Ensure PKI solutions follow industry regulations (e.g., PCI-DSS, GDPR, RFC 3647) and internal security policies.
• Conduct regular audits of PKI systems to identify vulnerabilities and ensure compliance with security standards.
•  Collaboration
• Collaborate with IT, legal, compliance, and risk management teams to align PKI strategies with overall business aims and regulatory requirements.
• Incident Response & Troubleshooting
• Respond to security incidents involving PKI systems, including certificate expiration, revocation, and compromise.
• Troubleshoot and resolve complex issues related to PKI infrastructure, ensuring minimal disruption to business operations.
• Innovation & Strategy
• Stay up to date with the latest developments in cryptography, PKI technologies, and security best practices.
• Recommend and implement new technologies and strategies to enhance the bank’s cryptographic services and overall security posture.
•  Documentation & Reporting
• Maintain comprehensive documentation of PKI architecture, configurations, and procedures.
• Provide regular reports to senior management on the status of PKI operations, security risks, and compliance.