Associate Director, CS Risk & Control

• The TTO ICS Risk and Governance has been set-up to provide best in class risk & control execution from both a 'Vertical' and 'Horizontal' perspective. Central Risk & Governance is one of the horizontal functions in TTO ICS team with the objective to ensure effective application of relevant Principal Risk Type Frameworks across TTO ICS, including the provision of relevant information to Risk Management and Oversight Forums, and to oversee the timely identification and resolution of emerging risks, issues, and findings. In addition, to raise the effectiveness and efficiency of risk and control management across all ICS domains

• Associate Director, ICS Risk and Control LRM role is created under Cyber Security Service Risk and Control team for managing and responding to regulatory & external audit requests for information (RFI) related to vulnerability management infrastructure security & Application Security. This role requires an understanding of regulatory requirements, vulnerability assessment processes, and effective communication.

• Serve as the primary point of contact for regulatory RFI requests related to vulnerability management infrastructure security & Application Security domains.
• Coordinate with internal teams to gather necessary information and documentation to respond to RFI requests.
• Ensure timely and accurate submission of responses to regulatory bodies.

• Collaborate with the Vulnerability Management team to understand current vulnerability management processes, tools, and methodologies.

• Prepare comprehensive and clear documentation to support RFI responses, including detailed reports, summaries, and supporting evidence.
• Ensure all documentation meets regulatory requirements and is presented in a professional manner.

• Communicate effectively with internal stakeholders to gather necessary information and ensure alignment on RFI responses.

• Identify opportunities to improve the efficiency and effectiveness of the RFI response process.
• Implement best practices and standard operating procedures to streamline RFI management.

• Assist with external audits related to vulnerability management and regulatory compliance.
• Provide documentation and evidence to support audit activities and findings.

• Support liaison with LRM AIC team and any third party or regulatory inspections.
• Be adept in the vulnerability management infrastructure security & Application Security processes to be able to respond to RFI queries on their own.
• Escalating significant risks and issues to the group process Owners and control owners.

• Display exemplary conduct and live by the Group's Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.

• Head Vulnerability Management and Infrastructure Security
• Head Application Security and Assurance
• AIC LRM team
• Country CISO POCs.

• Perform other responsibilities as assigned by the Risk & Control Lead

• Education - Bachelor / Honors Degree. Cyber Security or other technology related qualifications are added advantage.
• Languages - English

• Technology / Cyber Security Risk Management
• Vulnerability Management

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data centre
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
• "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another

Standard Chartered