Director, Otcr, Cib

Job Summary The Operational, Technology and Cyber Risk (OTCR) organisation is instrumental in protecting and ensuring the resilience of Standard Chartered Bank’s operations, data, and IT systems by managing operational, technology and cyber risk across the enterprise. As a critical function reporting into the Group Chief Risk Officer (CRO), the Group OTCR team serves as the second line of defence for assuring that controls are implemented effectively, in accordance with the OTCR Framework, and for instilling a risk culture within the Bank. Key Responsibilities Strategy • The Director, OTCR, CIB (ICS and Technology Risk Officer) is a permanent role that requires strong business acumen and deep knowledge and experience in the ICS and Technology field. The candidate has a strong understanding of operating in a second line capacity within the ICS and Technology risk management organisation, and can respond flexibly and collaboratively to evolving business, regulatory and threat requirements. • The role reports directly to the Head, OTCR CIB ICS and Technology Risk to address ICS and Technology risk for CIB and support its integration into the Bank's overall ICS and Technology Risk Management strategy. • The role provides oversight and challenge of ICS and Technology risk management and control effectiveness as a risk partner to Transaction Banking, Client Coverage and Digital Assets as defined in the Bank’s Enterprise Risk Type Framework. Business • The primary purpose of this position is to ensure that the management of ICS and technology risk is operating effectively and efficiently and to provide assurance that risk as appropriately managed within the Transaction Banking, Client Coverage and Digital Assets. The candidate works closely with Head of OTCR CIB ICS and Technology Risk, Global Head OTCR CIB, CISO, COOs, CIOs, and Operational Risk Officers, as well as other key stakeholders to drive requirements and help set priorities for ICS, Technology and Digital Assets risk strategy and investment based on acceptable risk tolerance and considering the evolving threat and regulatory landscape, policies and standards, and technology infrastructure. Processes The major functional activities that OTCR CIB ICS and Technology Risk Officer will lead and manage are: • Promote a healthy ICS and Technology risk culture and good conduct within the Transaction Banking, Client Coverage and Digital Assets. • Establish strong relationships with identified stakeholders across the Transaction Banking, Client Coverage and Digital Assets, understand their strategic goals to ensure ICS and Technology alignment. • Articulate the value of ICS and Technology controls and their bottom-line impact to CIB business security and resiliency. • Monitor, assess and advise Transaction Banking, Client Coverage and Digital Assets on acceptable risk tolerances based on policy and control environment and the evolving regulatory and threat landscape. • Utilise appropriate risk management tool(s) to manage, track and monitor ICS and Technology risks across Transaction Banking, Client Coverage and Digital Assets. • Validate the accuracy of KRI’s, KCI’s, risk assessments and other risk ratings, as well as process designs to meet policy requirements. • Maintain relationships with key service and product owners within CISO and CIO to keep abreast of changes that may affect the risk landscape. • Oversee and challenge to ensure Transaction Banking, Client Coverage and Digital Assets projects with an ICS and Technology element are correctly managed via a formal secure development lifecycle. • Set appropriate tone and expectations from the OTCR team and work in collaboration with risk and control partners. • Prepare, present and challenge in a 2nd line capacity at relevant risk committees, steering groups and for cross-business opportunities. • Use the Enterprise Risk Management Framework (including supporting tools, processes, and procedures) to ensure ICS and Tech-related risks in CIB are flagged and treatment plans are in place. • Identify root causes for common risks and work with CISO and CIO to ensure sustainable improvements are proposed and actioned. • Ensure risks are accurately reported to various stakeholders using available MI. • Hold Process Owners accountable to ensure they are escalating risk, control, and process deficiencies appropriately in accordance with the relevant risk frameworks and governance frameworks. • Implement and maintain sufficie…