Vice President, Otcr, Tech

Job Summary The purpose of the role is to help deliver an independent and effective second line of defence for Technology Risk and Information and Cyber Risk as part of the Operational Technology Cyber Risk OTCR function OTCR cover second line responsibilities for non-financial risks and report into the Chief Risk Office This is a permanent single contributor role based in India Bengaluru that requires broad knowledge of Technology Risk and Information Cyber Security along with specific expertise in the first line activities undertaken by Technology Architecture function T A to provide effective oversight and challenge T A deliver enterprise technology for the rest of the bank and define common technology processes and controls for business CIO teams to follow in the following disciplines Architecture management System and software delivery lifecycles including modern techniques e g DevOps IT Service Management e g problem incident change asset management etc Infrastructure management including both on-premises and cloud Data platforms infrastructure only Workplace services The role will be expected to focus on one or more of the above disciplines and oversee the follow regular cycle of operational risk activities Risk Assessments - Challenge Risk Control Self Assessments RCSA for Technology Risk and Cyber Risk including Treatment Plans and Closures Risk Events - Challenge Operational Risk Events for technology and cyber incidents and monitor related significant financial losses Challenge Treatment Plans for Root Cause Reviews Change Governance - Challenge-Approve Change Risk Assessments and Go Lives for Technology initiatives Policy and Standards - Support owners of Technology and ICS Policy and Standards to oversee the effectiveness of their requirements including oversight of any country variations as required Risk Committees - Support OTCR management with risk insights for escalation to risk committees and related forums Key Responsibilities Strategy Awareness and understanding of the Group s and Function s business strategy and model appropriate to the role Business Awareness and understanding of the wider business economic and market environment in which the Group operates Processes Responsible for executing risk management responsibilities of the second line of defence as defined within the Operational Technology and Cyber Risk function People Talent Responsible for individual training and familiarisation of knowledge relevant to the role and subject matter areas of work that is assigned Working in collaboration with stakeholders whilst upholding and reinforcing the independence of the second line Establishing constructive relationships with Key Stakeholders as defined below Risk Management Understanding the role s responsibilities with respect to the relevant risk policies standards risk framework owner role and second line operational risk role Governance Rsponsible for supporting the OTCR Framework and Policy for the role s select Skills and Experience Display exemplary conduct and live by the Group s Values and Code of Conduct Take personal responsibility for embedding the highest standards of ethics including regulatory and business conduct across Standard Chartered Bank This includes understanding and ensuring compliance with in letter and spirit all applicable laws regulations guidelines and the Group Code of Conduct Effectively and collaboratively identify escalate mitigate and resolve risk conduct and compliance matters Key stakeholders INTERNAL Technology Architecture Process Owners and Teams Technology Architecture first line Risk Management Teams OTCR Coverage Teams for other areas of the bank OTCR Coverage Teams for countries OTCR Policy Owners Risk Framework Owners and Policy Owners for Compliance risk types Group Internal Audit Compliance Other Responsibilities Embed Here for good and Group s brand and values in team Perform other responsibilities assigned under Group Country Business or Functional policies and procedures Multiple functions double hats Skills and Experience Information Cybersecurity Risk Management Emerging Technologies Industry Knowledge Information Security Architecture Operational and Technology Risk Information Technology IT Security Policies Operational Technology Risk Management Regulatory Environment - Financial Services Change Management Risk Qualifications EDUCATION- Degree in Information and Cyber Security or Technology or equivalent CERTIFICATIONS- Profession Certifications related to project management software delivery lifecycles technology processes and security considered an advantage or equivalent practical on the job experience e g CISSP CCSP CISA CISM or equivalent LANGUAGES- Excellent written and oral communication and reporting skills in English Qualifications Candidates are particularly welcome that have performed first line technical delivery roles and wish to make a transition into risk management Such candidates should be able to demonstrate transferable technical skills in the Technology Architecture disciplines and a passion to become a risk professional Minimum 10 years experience in financial institutions and or highly regulated technology dependent industries Previous experience in second line risk and third line audit roles are an advantage but not a pre-requisite Deep knowledge of general computer controls for both technology and information security across the full lifecycle of technology build and run activities Strong knowledge of the latest modern computing techniques such as cloud agile and DevOps APIs modern architecture principles etc Passion and interest in keeping pace with emerging technologies and an interest to stay abreast of industry developments Knowledge of IT and security frameworks COBIT ISF COSO NIST ISO etc Strong negotiation and collaboration skills along with the ability to work effectively in a complex multicultural and multi-time zone organization with many different stakeholders Comfortable being proactive and looking beyond a purely task-driven approach and able to take ownership of the wider objective while seeking for support when required Demonstrates competency in Critical Thinking Non-Financial Risk Management managing change and Stakeholder Management Profession Certifications related to project management software delivery lifecycles technology processes and security considered an advantage or equivalent practical on the job experience e g CISSP CCSP CISA CISM PMP or equivalent About Standard Chartered We re an international bank nimble enough to act big enough for impact For more than 170 years we ve worked to make a positive difference for our clients communities and each other We question the status quo love a challenge and enjoy finding new opportunities to grow and do better than before If you re looking for a career with purpose and you want to work for a bank making a difference we want to hear from you You can count on us to celebrate your unique talents and we can t wait to see the talents you can bring us Our purpose to drive commerce and prosperity through our unique diversity together with our brand promise to be here for good are achieved by how we each live our valued behaviours When you work with us you ll see how we value difference and advocate inclusion Together we Do the right thing and are assertive challenge one another and live with integrity while putting the client at the heart of what we do Never settle continuously striving to improve and innovate keeping things simple and learning from doing well and not so well Are better together we can be ourselves be inclusive see more good in others and work collectively to build for the long term What we offer In line with our Fair Pay Charter we offer a competitive salary and benefits to support your mental physical financial and social wellbeing Core bank funding for retirement savings medical and life insurance with flexible and voluntary benefits available in some locations Time-off including annual leave parental maternity 20 weeks sabbatical 12 months maximum and volunteering leave 3 days along with minimum global standards for annual and public holiday which is combined to 30 days minimum Flexible working options based around home and office locations with flexible working patterns Proactive wellbeing support through Unmind a market-leading digital wellbeing platform development courses for resilience and other human skills global Employee Assistance Programme sick leave mental health first-aiders and all sorts of self-help toolkits A continuous learning culture to support your growth with opportunities to reskill and upskill and access to physical virtual and digital learning Being part of an inclusive and values driven organisation one that embraces and celebrates our unique diversity across our teams business functions and geographies - everyone feels respected and can realise their full potential 14286