CTE QA Architect

Role:
Testing Strategy & QA Governance Consultant (Cyber)

Location:

Sheffield, UK (Hybrid role, require 2-3 days a week onsite)

Big Bank Funding. Fin Tech Thinking

Our technology teams work closely with HSBC’s global businesses to help design and build digital services that allow our millions of customers around the world, to bank quickly, simply and securely. We also run and manage our IT infrastructure, data centres and core banking systems that power the world’s leading international bank.

Our multi-disciplined teams include Dev Ops engineers, IT architects, front and back-end developers, infrastructure specialists, cyber experts, as well as project and programme managers.

Following extensive investment across our Technology and Digital domains and with plans for continued expansion throughout 2025 and beyond, we are currently seeking a QA Architect who will be able to define the Testing Strategy and standards across Cyber as part of a central Professional Testing Practise. This is a delivery-focused role with clear outcomes: you’ll be accountable for defining and embedding Cyber-wide testing strategy, QA maturity assessment and an actionable remediation roadmap.

Cybersecurity Technology & Engineering is responsible for fielding solutions that help defend HSBC against a wide range of threats to the business as well as its customers, clients, partners, and staff. The team works in concert, with partner teams across HSBC, to implement novel defensive capabilities that are effective and adaptable against a constantly evolving threat landscape. The function operates under the vision: “Enabling HSBC to be safely successful everywhere the Firm chooses to do business”.

The role will report to the Cyber QA Practice lead and will be responsible for supporting the establishment and development of Cyber's Professional Testing Practise, contributing to its strategic direction and helping to drive improvements across all facets of testing across Cyber. The role will involve working closely with a wide range of stakeholders including Cybersecurity project teams, Control Owners, and the business.

The role is outcome-driven and will be measured on delivery of agreed artefacts and adoption across Cyber teams.

The role will:

• Define and deliver, with guidance from the Cyber QA Practice Lead, the Testing Strategy, QA Maturity Framework and QA standards to be used across Cyber, including the frameworks, processes, methodologies and tooling that should be used and adopted by the Cyber teams.
• Lead on the Maturity Framework assessment and definition of the remediation plan needed to meet the agreed framework levels. This includes driving the adoption of automated test practices across Cyber and assisting teams in determining the correct level of performance and stress testing to be performed. This will cover both in-house developed applications and third-party applications that are supported and maintained by the Cyber teams.

• Provide support and assistance to the Cyber QA Practice Lead and help ensure their vision is effectively developed and implemented across the Cyber delivery teams.
• Define and deliver appropriate training for the Testing Practice members and QA professionals within the Cyber teams and monitor adoption and usage of QA tools within the existing environments.
• Provide standards and guidance for testing evidence suitable for audit review in our Regulated business environment and ensure that teams are following these guidelines and provide metrics and dashboards to support adoption tracking.
• Work with the Cyber QA Practice Lead to establish clear KPIs and OKRs for the Cyber QA Team, tracking delivery performance, quality improvements, and process efficiency.
• C…