Manager, Technology Control Testing

Job Summary

This position could be based in Malaysia or India. When you start the application process you will be presented with a drop down menu showing all countries, please see to it that you select a country where the post is based

To help grow trust with customers and regulators and maximize risk reduction, a Senior Manager of Technology Controls Testing job has been created to execute the testing of key IT controls throughout the bank’s critical IT systems. The job is integral to the execution of control testing spanning critical regulatory frameworks, such as UK ACG FRCF (Financial Reporting & Controls Framework) and Material Controls (covering BAU). These are ongoing regulatory criteria with direct linkage to the bank’s control assurance, financial reporting integrity, and resilience expectations. 

This new team will offer planning, execution, reporting, governance, as well as advocating and imparting lessons and good practice to shape the design and implementation of core IT controls testing spanning all of the bank’s critical IT systems. In addition, determining whether these main controls are operating successfully via an evidence-based testing process.

Key Responsibilities

Strategy
•    Sustain effective relationships with stakeholders to facilitate:
•    Effective core IT controls testing;
•    The provision of timely, expert advice and assurance; and
•    Partnerships with other functions to give professional advice and assurance.
 

Business
•    Execute a consistent, sustainable and re-performable technical control testing framework/methodology for the bank’s critical IT systems.
•    Support the provision of timely and accurate control testing MI to the respective risk forums throughout business and functions.
•    Promote compliance with the Bank’s risk framework and policies (e.g. ERMF and O&T RTF)
•    Support stakeholders in defining remediation actions to address identified control weaknesses and issues over critical IT systems, and associated processes. 
•    Track issue remediation, check and challenge delivery status and escalate delays.
•    Recognise chances for automation of controls testing.

Processes
•    Support the continuous improvement of risk and control processes, aligning to and avoiding duplication with other assurance functions.

People & Talent
•    Deliver proactive self-orienting and self-motivating leadership, and team up with limited direction
•    Lead through example and develop the appropriate culture and values. Set appropriate tone and expectations, and work in collaboration with risk and control partners.
•    Cultivate the right mix of SME and risk & control competencies.

Risk Management
•    Adopt an anticipatory approach to risk assessment through stakeholder engagement and monitoring of the external environment.
•    Team up with other control assurance teams to drive productivity, effectiveness and reduce duplication.
•    Deliver robust challenge and escalation to senior management to ensure activities attain risk reduction.
•    Handle and drive continuous improvement of the IT control environment through proactive risk management.

Governance
•    Tracking and reporting of risk assessments (e.g. audits, risk assessments etc) and their outputs to ensure oversight and escalation mechanisms are in place to offer MI on obligations.
•    Collaborate with the Application/Service Owners of critical IT systems to recognise emerging IT risks and guarantee they are appropriately addressed by relevant technical controls.

Regulatory & Business Conduct
•    Display exemplary conduct and live by the Group’s Values and Code of Conduct. 
•    Take personal responsibility for embedding the highest standards of ethics, covering regulatory and business conduct, spanning Standard Chartered Bank. 
•    Contribute in the Controls team to attain the outcomes set out in the Bank’s Conduct Principles: The Right Environment. 
•    Successfully and collaboratively recognise, escalate and resolve conduct and compliance matters.
•    Offer timely and accurate risk & control information to support regulatory meetings and RFIs.

Core stakeholders
•    Head of Controls Testing 
•    TTO Risk Management
•    Group Operational Risk
•    Group Internal Audit – Enterprise Technology

Abilities and Experience

•    IT / Technology Audit
•    IT / Technology Risk & Controls

Qualifications

Desired:
•    Tertiary qualifications in Computer Science, Economics, Law or other relevant areas
•    5-8 years in IT Audit and/or IT Risk Management
•    Background in US SOX regime
•    Professional qualifications such as CISA / CRISC will be advantageous
•    Technical know-how on IT controls best practices spanning different platforms, systems and security tools
•    Good understanding of security 

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our customers, communities, and each other. We question the status quo, love a challenge and enjoy finding new openings to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you team up with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the customer at the heart of what we do
• Never settle, continuously striving to strengthen and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to create for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off such as annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human competencies, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your progress, with chances to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, over our teams, business functions and geographies - everyone feels respected and can realise their full potential.