> Markdown version of [/jobs/ext/3026418-engineering-delivery-lead-risk-compliance-technology](https://www.wearedevelopers.com/jobs/ext/3026418-engineering-delivery-lead-risk-compliance-technology). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Engineering & Delivery Lead - Risk & Compliance Technology - **Company:** HSBC Group - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Application Programming Interfaces (APIs), Agile Methodology, Artificial Intelligence, Automation of Tests, Cloud Computing, Software Quality, Continuous Integration, Distributed Systems, Python (Programming Language), Software Engineering, Data Streaming, Trunk-based Development, Performance Testing, Istio, Delivery Pipeline, Technical Debt, Kubernetes, Deployment Automation, Production Code, Devsecops - **Published:** September 22, 2026 - **Apply:** https://dejobs.org/x/x/84131DB9F6954F5AB10365321310AC8E/job/ ## About the Role * Bring proven experience designing, building and running secure services in a highly regulated environment with strong security and control frameworks * Demonstrate deep hands-on engineering capability in Java or Python including building high-performance services and working with concurrency and distributed patterns * Apply substantial experience with event-driven and distributed systems including low-latency architectures and synchronous and asynchronous execution models * Use strong knowledge of containers, Kubernetes, cloud, service mesh, event streaming and production observability to improve resilience and operability * Show experience automating delivery and operations including CI/CD, deployment automation, performance testing, rollback and controlled production releases * Apply practical expertise across architecture, APIs, data flows, deployment pipelines and code quality including managing technical debt * Embed Agile product delivery practices with outcome-led backlogs, effective sprint routines and frequent business feedback * Influence senior stakeholders by explaining technology clearly and shaping decisions across teams and functions Building safer and faster decisions ## Description Ready to build resilient risk controls and regulatory management platforms at scale?, Based in London, this role sits within Group Functions Technology in Risk and Compliance Technology and reports to the Risk Stewardship Enabler Value Stream Technology Lead. You'll be accountable for the engineering capability behind Risk Controls Assessment (RCA) and Regulation Management, shaping how we design, build, deploy and run secure, resilient and scalable services in a highly regulated environment. Working closely with Risk stakeholders and Value Stream-aligned DevSecOps teams you'll translate business and regulatory priorities into clear product outcomes with ownership across architecture, backlog, build, release and production. A key measure of success is stable, observable services with strong technology controls that meet HSBC standards and regulatory expectations. You'll also help modernise engineering practices across the portfolio to improve time-to-market, operational efficiency and risk outcomes. This is a hands-on role with scope to contribute production code and set reference implementations that raise the bar across teams. What you'll be doing * Own delivery of the RCA and Regulation Management book of work, achieving agreed milestones within planned schedules * Oversee engineering across the full lifecycle from discovery and architecture through build, test, deployment, production support and continuous improvement * Build secure, resilient and scalable capabilities with clear ownership across architecture, backlog, release and run * Champion modern software engineering practices including Agile delivery, DevSecOps, trunk-based development, automated testing and CI/CD * Embed approved AI-enabled engineering practices across design, development, testing, security, documentation and operations with governance and traceability * Strengthen production stability and service resiliency by improving observability, operability, technical debt management and controlled release practices * Establish a strong technology control environment aligned to HSBC standards and regulatory expectations and address gaps in coupling, ownership and design * Partner with stakeholders across Global Risk, Compliance, Procurement, regional technology and key vendors to align priorities and outcomes ## Related Videos - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [Inside Bitpanda's Tech Stack: Scaling a European Fintech Leader - Markus Dorner](https://www.wearedevelopers.com/videos/1979-inside-bitpanda-s-tech-stack-scaling-a-european-fintech-leader-markus-dorner) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)