Senior Manager, Regulatory Technology Control Test (Malaysia, India)

Job Summary

This post could be based in Malaysia or India. When you start the application process you will be presented with a drop-down menu showing all countries, please make sure that you only select a country where the job is based

To help grow trust with client organisations and regulators and maximize risk reduction, a Senior Manager of Technology Controls Testing position has been created to execute the testing of core IT controls spanning the bank’s critical IT systems. The position is integral to the execution of control testing over critical regulatory frameworks, among them UK ACG FRCF (Financial Reporting & Controls Framework) and Material Controls (such as BAU). These are ongoing regulatory expectations with direct linkage to the bank’s control assurance, financial reporting integrity, and resilience expectations. 

This new team will give planning, execution, reporting, governance, as well as advocating and imparting lessons and good practice to shape the design and implementation of main IT controls testing over all of the bank’s critical IT systems. In addition, determining whether these key controls are operating efficiently via an evidence-based testing process.

Core Responsibilities

Strategy
•    Keep up effective relationships with stakeholders to facilitate:
•    Effective main IT controls testing;
•    The provision of timely, expert advice and assurance; and
•    Partnerships with other functions to deliver professional advice and assurance.
 

Business
•    Execute a consistent, sustainable and re-performable technical control testing framework/methodology for the bank’s critical IT systems.
•    Support the provision of timely and accurate control testing MI to the respective risk forums spanning business and functions.
•    Promote compliance with the Bank’s risk framework and policies (e.g. ERMF and O&T RTF)
•    Support stakeholders in defining remediation actions to address identified control weaknesses and issues throughout critical IT systems, and associated processes. 
•    Track issue remediation, check and challenge delivery status and escalate delays.
•    Pinpoint prospects for automation of controls testing.

Processes
•    Support the continuous improvement of risk and control processes, aligning to and avoiding duplication with other assurance functions.

People & Talent
•    Offer proactive self-orienting and self-motivating leadership, and collaborate with limited direction
•    Lead through example and create the appropriate culture and values. Set appropriate tone and expectations, and work in collaboration with risk and control partners.
•    Cultivate the right mix of SME and risk & control capabilities.

Risk Management
•    Adopt an anticipatory approach to risk assessment through stakeholder engagement and monitoring of the external environment.
•    Collaborate with other control assurance teams to drive streamlining, effectiveness and reduce duplication.
•    Offer robust challenge and escalation to senior management to secure activities deliver on risk reduction.
•    Oversee and drive continuous improvement of the IT control environment through proactive risk management.

Governance
•    Tracking and reporting of risk assessments (e.g. audits, risk assessments etc) and their outputs to secure oversight and escalation mechanisms are in place to give MI on obligations.
•    Partner with the Application/Service Owners of critical IT systems to pinpoint emerging IT risks and ensure they are appropriately addressed by relevant technical controls.

Regulatory & Business Conduct
•    Display exemplary conduct and live by the Group’s Values and Code of Conduct. 
•    Take personal responsibility for embedding the highest standards of ethics, such as regulatory and business conduct, over Standard Chartered Bank. 
•    Contribute in the Controls team to deliver on the outcomes set out in the Bank’s Conduct Principles: The Right Environment. 
•    Efficiently and collaboratively pinpoint, escalate and resolve conduct and compliance matters.
•    Give timely and accurate risk & control information to support regulatory meetings and RFIs.

Main stakeholders
•    Head of Controls Testing 
•    TTO Risk Management
•    Group Operational Risk
•    Group Internal Audit – Enterprise Technology

Competencies and Experience

•    IT / Technology Audit
•    IT / Technology Risk & Controls

Qualifications

•    Tertiary qualifications in Computer Science, Economics, Law or other relevant areas
•    5-8 years in IT Audit and/or IT Risk Management
•    Track record in US SOX regime
•    Professional qualifications such as CISA / CRISC will be advantageous
•    Technical understanding on IT controls best practices over different platforms, systems and security tools
•    Good understanding of security processes, risks and controls, audit and testing methodologies

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our client organisations, communities, and each other. We question the status quo, love a challenge and enjoy finding new chances to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you collaborate with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client organisation at the heart of what we do
• Never settle, continuously striving to enhance and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to establish for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off among them annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human capabilities, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your development, with prospects to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, throughout our teams, business functions and geographies - everyone feels respected and can realise their full potential.