Associate Manager, Ops Excellence

Job Description

*Role Responsibilities Strategy The Group Chief Information Security Officer (CISO) organisation is instrumental in protecting and ensuring the resilience of Standard Chartered Bank s data and IT systems by managing information and cyber security (ICS) risk across the enterprise. As a critical function within the Group Chief Operating Officer (COO), Trust, Data & Resilience, the Group CISO serves as the first line of defence for operating ICS controls effectively and in accordance with the ICS Risk Framework and for practicing and promoting a culture of cyber security within the Bank. As such, the Group CISO is central to ensuring the Bank s ability to meet its ICS commitments to internal and external stakeholders, including regulators, as well as maintaining an acceptable ICS risk profile that is regularly reported to the BoardThe main purpose will be to support the Head of COE Ops. In managing the TPSR Help desk.
• Better understand the status of controls and risk for the Third Party
• Manage TPSR mail box and support CM and Cos as required by the process
• Enforce contractual obligations by the Third Party as required.
• Dash board preparation / MIS and maintain records and references
• Support in Exit and termination activities and Smartbot managements
• Utilize insight generated from continuous Monitoring capabilities
Business
• Act as an advocate of good practice and go to for the stakeholders to ensure they understand their roles and responsibilities across the lifecycle of Third Party Security Assessment, Business Resilience and Data Privacy.
• Improved coverage and quality of assurance from Contract Manager for third party oversight (i.e. Service Review Meeting and Exit & Termination).
• Effectively communicate the security risks to internal and external stakeholders.
• Effectively communicate and manage relationships with stakeholders globally
. Processes
• Diligently provide weekly and ad hoc reporting on the status of assessments and on-going requirements.
• Assist in the forward planning and prioritisation of vendor assessments or requests from business stakeholders, and resource allocations.
• Support and assist in third party program improvement initiatives.
• Support any training and awareness initiatives relating to third party security risk.
Risk Management
• Maintain a consolidated view of third party security risks and ensure that deficiencies are mitigated by stakeholders.
• Assist in ensuring compliance with relevant regulations covering third party security risk.
• Monitor and report on third party security risk compliance to stakeholders.
• Work with team members to effectively perform third party security risk assurance and ensure quality and timely execution.
• Remain current on industry trends and regulatory requirements related to third party information security.
Governance
• Ensure robust governance over all activities, including maintaining audit trail, escalations and reporting.
Regulatory & Business Conduct
• Display exemplary conduct and live by the Group s Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
• Follow the Leadership of Global Head of TPSR to achieve the outcomes set out in the Bank s Conduct Principles: Fair Outcomes for Clients; Effective Operation of Financial Markets, Financial Crime Prevention; Creating the Right Environment.
• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.
Key Stakeholders
• Contract managers and Contract owners
• Head TPSR
• SCM Leads
• Information and Cyber Security Risk Officers/ Ops team in other partners
Other Responsibilities
• Embed Here for Good and Group s brand and values in the TPSR Team.
• Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures.
Our Ideal CandidateQualifications
• Bachelor s degree from an accredited college/university in an appropriate field
• 5 8 years experience in IT Service Management / Service Desk, preferably with Big 4 and/or Banking & financial services experience
• Help desk experience in TPSR area preferable
• Experience in third party audits or risk management is a plus, but understanding of auditing standards, compliance, risk assessment and internal control frameworks is a requirement
• Familiarity with working in a multi-national company or cross-cultural setting
• Excellent written and interpersonal skills
• Strong time management skills
• Ability to draft reports that clearly communicate observations and risks would be required
• Strong stakeholder engagement skills, and ability to interact at all levels across an organisation
• Strong audit project organisation and management skills
• Ability to multitask and ensure that all key priorities are delivered as per agreed timelines
• Knowledge of security frameworks (e.g. COBIT, ISF, COSO), standards (e.g. ISO, NIST, CIS), information security principles, security architecture and regulatory requirements will be a plus
• Competency with Microsoft Office Suite (Word, PowerPoint, Excel, Visio, SharePoint)
Role Specific Competencies
• Manage Conduct
• Manage Risk
• Manage People
About Standard Chartered Were an international bank, nimble enough to act, big enough for impact. For more than 160 years, weve worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If youre looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents. And we cant wait to see the talents you can bring us.Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, youll see how we value difference and advocate inclusion. Together we:
• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Be better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term
In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations
• Time-off including annual, parental/maternity (20 weeks), sabbatical (12 weeks maximum) and volunteering leave (3 days), along with with minimum global standards for annual and public holiday, which is combined to 30 days minimum
• Flexible working options based around home and office locations, with flexible working patterns
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.
Recruitment assessments - some of our roles use assessments to help us understand how suitable you are for the role youve applied to. If you are invited to take an assessment, this is great news.,

Keyskills :
risk assessmentmanagementrisk managementmisinternal controlqualityrisk assurancesalescyber security