Associate Director, OTCR, WRB

• Single Point of Contact (SPOC): Acts as the primary advisor for the second line regarding all OTCR (Operational and Technology Risk) matters for their assigned portfolio.
• Strategic Advisory: Provides judgment-based input to ensure risk management practices are integrated across all WRB operations.
• Stakeholder Collaboration: Partners with senior stakeholders, Subject Matter Experts (SMEs), and other risk teams to guide the "first line" leads in making informed, risk-based decisions.
• Problem Solving: Addresses complex issues and adapts to evolving regulatory, business, and threat landscapes.

• Experience: Proven track record in second-line risk management and familiarity with WRB-specific tools and practices.
• Leadership: Ability to set a vision, provide clear direction, and take on "tough challenges" with courage and flexibility.
• Soft Skills: High proficiency in stakeholder management, communication, and a collaborative mindset.
• Focus: A commitment to delivering customer-centric solutions while maintaining rigorous risk standards.

• Execute the OTCR strategy for WRB, aligned to the OTCR Cyber Strategy and service priorities.
• Translate enterprise cyber risk objectives into actionable WRB-specific risk outcomes, metrics, and roadmaps.
• Influence decisions by providing clear risk-based insights on priority applications, platforms, and services.
• Act as a strategic advisor to senior stakeholders on emerging cyber risks (e.g., ransomware, data theft, cloud, GenAI, third-party concentration risk).

• Partner with WRB business heads, technology leaders, and CISOs to enable secure growth, digital initiatives, and new product launches.
• Provide risk-informed challenge on material initiatives (e.g., cloud migration, platform modernisation, vendor onboarding, GenAI implementations).
• Balance loss of data, loss of funds, and loss of service considerations to support informed business decision-making.
• Represent WRB cyber risk position in executive forums, steering committees, and investment discussions.

• Own and oversee Threat Scenario Risk Assessments (TSRA), domain risk profiling, and thematic cyber reviews for WRB.
• Establish consistent 2nd-line processes for risk identification, assessment, acceptance, treatment tracking, and reporting.
• Ensure cyber control implementation is prioritized on scoped / high-risk applications and progress is independently tracked.
• Drive continuous improvement and automation of OTCR processes to improve efficiency, coverage, and data quality.

• Act as a role model for independent challenge, constructive engagement, and risk culture maturity.
• Contribute to succession planning, capability uplift, and talent development across the cyber risk function.

• Maintain the WRB cyber domain risk profile, ensuring risks are accurately assessed, challenged, agreed, and kept current.
• Provide independent oversight of vulnerability exposure, ransomware readiness, third-party cyber risk, and control effectiveness.
• Ensure alignment with the Bank's risk appetite, ICS expectations, and regulatory obligations.
• Escalate material or systemic risks with clear impact analysis and recommended management actions.

• Drive governance excellence by leveraging existing management reports and identifying opportunities to optimize reporting structures for improved operational outcomes.
• Support internal and external audits, regulatory reviews, and supervisory engagements related to cyber risk.
• Ensure strong linkage between 1st Line execution and 2nd Line oversight, including evidence-based challenge.
• Contribute to Group-wide cyber governance forums and policy direction where WRB impact is material.

• Display exemplary conduct and live by the Group's Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

• All teams of the following areas that support the assigned portfolio:
• CEO WRB
• CRO WRB
• COO WRB
• CIO WRB
• CISO WRB

• Functional Heads of WRB
• WRB leadership team
• Head Second Line Assurance WRB
• Head of Audit WRB Functional Heads example includes all relevant first line support functions for WRB e.g., WRB COO, WRB CIO, WRB CISO, WRB Human Resources, WRB Finance, etc.

• The Group's external auditors

• Education - Degree level education or equivalent, in engineering or information technology
• Certifications - Iso 27000 series, cloud certifications, fundamental ai/ml knowledge
• Languages - Excel macros, PowerBuilder

• Cyber & Technology Risk Management (Banking)
• Threat Scenario Risk Assessment (TSRA) & Domain Risk Profiling
• Third-Party & Supply Chain Cyber Risk
• Cyber Governance, Risk Reporting & Executive Oversight
• Cloud & Digital Platform Risk Oversight
• Data Protection & Information Security Risk
• Network Security and Segmentation risk oversight
• Gen AI risk governance and control oversight

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data centre
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
• "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another

Standard Chartered