Risk Manager, Technology Risk Management (India, Malaysia)

Key Responsibilities

• Risk Identification, Assessment, Monitoring and Reporting • Proactive risk identification including risk assessment and timely mitigation measures. • Risk Response Management - Risk Event / Root Cause Review (RCA) • Work with Technology teams across all CIO domains and sub domains to review the appropriateness of process design keeping standardisation, control, client service and simplicity at the root of all processes. • Monitoring of controls Compliance and Performance, work with the Process Owners to rectify any gaps, including assessing the appropriateness of controls. • Provide support in evaluation and assessments of risk dispensations and exceptions • Residual Risk assessment and reporting. Identify potential areas of concerns and working with issue / action owners in the implementation of proactive risk mitigation actions. • Support validation of Risk Remediation (completed treatment plans and risk reductions) • Support risk management oversight for each Line of Business on Technology risk matters • Support 1/2LOD Line Conformance & Control Testing / Assurance Review Internal/External Events • Ensure regular reviews of risk items for trends. Assess operational risk events and determine appropriateness of remedial actions against root causes. Provide feedback to Process owners and CIO teams.
• Audit Engagement and Remediation • Support audit requests coming from Internal/External auditors with appropriate acknowledgement and responses in a timely manner, with end to end responsible. • Ensure timely management of audit engagement request and issues are address and closed before target dates. Escalate overdue requests or delayed responses as per standard TAT, to facilitate and ensure timely submission. Risk Culture and Awareness • Provide a regular review and update of materials aimed at raising risk awareness and instilling understanding of minimum standards of risk governance across the bank. • Produce regular trend analysis of key risk indicator exceptions and identify systemic failures.

Skills and Experience

• The successful candidate should have 10-15 years of experience in Technology Risk Management, Information Security, Technology Governance, Internal Audit (Technology) or other related roles.
• The preferred candidate will have experience in Financial Services or other heavily regulated industries (e.g. Pharmaceuticals, Healthcare, etc.). Clear, concise and articulate communication of complex and conceptual topics is required for success.
• Tertiary qualifications in Computer Science, Risk and Control, or other relevant areas.
• Excellent organizational and leadership skills with ability to manage multiple deadlines and effectively prioritise.
• Able to get things done in a quick-paced environment. Be transparent and open around what doesn’t work and what does.
• Good communication and technical report writing skill across various types of target audiences.
• Excellent understanding and proven track record of implementation of solutions using Business Intelligence platforms such as Power BI, Tableau, etc.
• Understanding of the Audit Lifecycle
• Knowledge of relevant Technology and Business Regulations; ideal candidate has direct experience of interface with Regulators (principally PRA, MAS and HKMA).
• Knowledge of and/or hands-on experience of Technology Architecture
• Documentation and Textual Analysis, Data Analytics,Process Design and Analysis
• Experience negotiating with and influencing technical and/or senior stakeholders
• Knowledge of Cloud and DevOps, Cloud CSP training such as AWS Foundation and/or MS Azure Fundamentals
• Excellent understanding of Operational Risk Management for a technology stream
• Strong performer, with efficiency and delivery outcomes

Qualifications

• Relevant industry certifications (e.g. CIA, CRISC, CISA, ITIL, CISSP, GRCP / CRCM)
• Experience with Technology Implementation or Operation
• Hands on experience with Control Design and Implementation
• Fluent English communication & writing skills

About Standard Chartered

What we offer

• In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.