Understanding the way forward if Corporate Card issuer cannot provide username and password

For AMEX CC Integration, we are using AMEX SFTP and we got username and password which we have configured under transfer parameters of manage corporate cards issuers

Currently, we have a requirement to do Credit card integration with HSBC.
Point 1: The bank cannot provide username and password to directly access to bank's SFTP. I wanted to understand is there any other way we can achieve this.
Point 2: Is the encryption mechanism supported by Oracle. (If the files are encrypted, can we decrypt them)