> Markdown version of [/jobs/ext/2250403-engineering-delivery-lead-risk-compliance-technology](https://www.wearedevelopers.com/jobs/ext/2250403-engineering-delivery-lead-risk-compliance-technology). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Engineering & Delivery Lead - Risk & Compliance Technology

- **Company:** HSBC Group
- **Location:** London, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Agile Methodology, Automation of Tests, Software Quality, Continuous Integration, Systems Development Life Cycle, Secure Coding, Data Streaming, Trunk-based Development, Delivery Pipeline, Technical Debt, Git Flow, Infrastructure Automation Frameworks, Deployment Automation, Devsecops
- **Published:** August 26, 2026
- **Apply:** https://dejobs.org/x/x/AB1807FFD50F497194A010AF91BF3CDC/job/

## About the Role

* Bring a proven track record overseeing delivery across a large, globally distributed and heterogeneous technology estate
 * Demonstrate technical credibility across architecture, code quality, APIs, data flows, build pipelines, test automation, deployment practices, observability, resilience, operability and technical debt
 * Apply substantial experience delivering in complex, regulated technology environments using Agile product delivery and DevSecOps practices
 * Show practical capability with Git-based workflows, trunk-based development, automated testing, CI/CD pipelines, deployment automation, release engineering and secure delivery controls
 * Evidence experience improving engineering quality and production readiness through clear trade-offs across non-functional requirements, controls and technical debt
 * Demonstrate experience reducing hand-offs between build and run through incident learning, automation, reduced toil and continuous improvement in reliability and delivery flow
 * Bring experience in Financial Services or another relevant regulated industry
 * Apply strong knowledge of RCAs and Regulation Management and/or Risk and Compliance technology domains including operational and regulatory control drivers
 * Demonstrate knowledge of ITIL or equivalent service management methodologies or bring equivalent demonstrable experience and apply SRE concepts such as SLIs, SLOs, error budgets and blameless postmortems
 * Bring experience managing technology vendors and third parties covering service performance, governance and commercial considerations

Building service resilience at scale

## Description

Ready to strengthen production resilience for Risk Controls and Regulation Management platforms?, Based in London, this Director level role sits within Group Functions Technology in Risk and Compliance Technology and reports to the R&C Risk Stewardship Enabler Value Stream Technology Lead. You'll own engineering outcomes for Risk Controls Assessment (RCA) and Regulation Management service management capabilities across a secure, resilient and scalable product and service portfolio. Working closely with Risk stakeholders and Value Stream-aligned DevSecOps teams you'll translate business and regulatory priorities into engineerable product outcomes with clear ownership from architecture and backlog through build, release and run. Success means improved production stability and service resiliency across the estate alongside a strong technology control environment aligned to HSBC standards and regulatory expectations. You'll set modern software delivery ways of working across teams and keep delivery focused on measurable improvements in time-to-market, operational efficiency and risk
outcomes. The role involves a wide stakeholder network across Global Risk, Compliance, Procurement, regional technology teams, vendors, Group Functions Technology and Infrastructure.

What you'll be doing

 * Own the timely delivery of the RCAs and Regulation Management book of work against agreed milestones and outcomes
 * Oversee engineering delivery across the full lifecycle from discovery and architecture through build, test, deployment, production support and continuous improvement
 * Embed Agile product delivery with prioritised outcome-led backlogs, effective sprint ceremonies, regular working software demos and frequent business feedback
 * Champion DevSecOps and modern SDLC practices including trunk-based development, automated testing, CI/CD, deployment automation, infrastructure as code, observability and secure coding
 * Provide hands-on engineering direction across architecture, code quality, APIs, data flows, deployment pipelines, operability, resilience and technical debt
 * Strengthen a "you build it, you run it" approach with clear ownership of reliability, controls, incident learning, production observability and service automation
 * Establish governance and control processes with DevSecOps teams to improve stability and resiliency across the production estate
 * Produce production health and control reporting including OKRs, KCIs and KPIs to highlight risk hotspots and prioritise continuous improvement
 * Coordinate major incident escalation and stakeholder engagement where there is potential regulatory, financial or reputational impact
 * Develop a diverse, inclusive and psychologically safe culture for the India team aligned to the HSBC brand and values


## Related Videos

- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)
- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)

## Related Articles

- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)