Job Summary
The Group Chief Information Security Officer (CISO) organisation is instrumental in protecting and ensuring the resilience of Standard Chartered Bank’s data and IT systems by managing Information and Cyber Security (ICS) risk across the enterprise.
ICS protect domain is central to ensuring the Bank’s ability to meet its ICS commitment to internal and external stakeholders, including regulators, as well as maintaining an acceptable ICS risk profile that is regularly reported to the Board, and that is supported by the Group ICS Risk & Governance Function.
The Head, Portfolio Strategy & Transformation role provides core Project Strategy & Planning support for the Global Head, ICS Protect with a core focus on Strategy, Planning, Business Operations and Special Project Delivery.
Key Responsibilities
Strategy
Portfolio Strategy & Governance
- Lead the Portfolio Strategy and Governance team
- Drive consistency in translation of ICS Strategy in cooperation with CPOs into sizeable and manageable piece of work
- Manage the ICS Unified backlog including the Flow of Work standardization, Refinement and Prioritization of Backlog to clarify the scope, benefits etc.
- Quality assurance, tracking and management of the benefits (financial, risk and others)
- Integration of demand flow into unified backlog from ERR TPs, stakeholder interactions, risk commitments, product roadmaps and others
- Manage, in cooperation with CPOs, POs and SMs, a forward-looking capacity/demand and actively managing reallocation of resources to relevant Squads / HIVEs
- Tracking and facilitating dependency management within and outside of ICS Portfolio
- Implementation of new/updated governance as per Change Delivery Standards
- Overall governance of the Investment
Cross-Hive Change Delivery
- Lead the Cross-Hive Change Delivery Team for management and delivery of the cross-Hive Initiatives that don’t have a lead Hive
- Ensure Benefits and Metrics are defined, agreed, tracked and reported for these cross-Hive Initiatives
- Responsible for LuW (Discovery) activities such as high-level understanding, sizing, prioritisation
- Constantly monitor and report on progress of the Initiatives to ICS MT
- Accountable for all the portfolio management and governance activities for these Initiatives
Ways of Working
- Lead the Ways of Working team
- Define and articulate ICS Transformation roadmap and priorities
- Align strategic direction and transformation vision with ICS leadership
- Lead the implementation of Product delivery model (Build, Maintain & Run)
- Accountable for transformation adoption across ICS
- Define the measures of success for the transformation and evolve them with the progress of transformation
- Drive standardization of Ways of Working practices
- Develop and upliftment of WoW capabilities (Product Ownership, DevSecOps etc.)
- Be the voice of ICS in all central Transformation forums
- Be a trusted advisor and influence CPOs to adopt transformation roadmap and delivery performance KPIs
- Govern the Org design and Roles
Skills and Experience
Business
• Ensure the voices of clients and relevant stakeholders (i.e., regional / country representatives) are represented continuously throughout the entire lifecycle of the product (ideation - development - deployment - operations).
• Ensure the delivery of the product contributes to the Business plan and QPR scorecard outcomes.
• Optimize value delivery through Continuous Improvement through relevant data and frequent feedback from stakeholders, SMEs, and customers.
• Create transparency around roadmap item progress, blockers, impediments, dependencies, and product value delivery via fit for purpose business and delivery metrics.
• Regularly showcase product / service increments to stakeholders.
Processes
• Ensure alignment to process management taxonomy and the bank standards (Example: front office processes that the product / service relates to).
• Optimize end to end customer journey through applying process mapping & finding opportunities for improvement.
• Engage process and risk control owners in upfront in design of process changes. Have oversight of, direct tracking and monitoring of programs.
• Adopt and embed the Change Delivery Standards throughout the lifecycle of the product/service.
• Awareness and understanding of the regulatory framework in which the Group operates, and the regulatory requirements and expectations relevant to the role.
Technology
• Enhance tooling for WoW with regards to Benefits tracking (OKR/KPI), Org Design, Flow of Work, Delivery Performance Metrics, Integration of Unified backlog to Risk management systems)
People & Talent
• Work with Coaches, PO and Hive Leadership to build an empowered, high performing team in a psychologically safe environment.
• Build a cross functional group of SMEs around Ways of Working, Change & Enablement, Portfolio Management and Change Delivery
Risk Management
• Ensure regular engagement and management of Process Change risks, Operational risks, Delivery risks and all other risks with relation to the Product's unified backlog.
• Balance technical debt, risk, and regulatory items with new features, functionality, or changes to keep the cost of change low.
• Actively mitigate systemic impediments and functional blockers impacting teams in completing release/sprint goals.
Governance
• Ensure effective Management input into Governance Boards exists providing evidence of high-level and low-level security technical standards being met, stakeholder requirements being met and transparency of critical service metrics.
• Provide reporting to appropriate risk committees on the evolution and progress ICS Protect Transformation Initiatives, and regular status updates for reporting to the Board and Group Management Team.
Regulatory & Business Conduct
• Display exemplary conduct and live by the Group’s Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across the Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
• Lead the Team to achieve the outcomes set out in the Bank’s Conduct Principles
• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.
• Display exemplary conduct and live by the Group’s Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
Key stakeholders
• Group CISO, TTO Group CISO MT
• CIO, Technology & Architecture, TTO CIA TSA
• CCO, TTO & Global Head Group Transformation, TTO COO
• Global Head, ICS Protect, TTO Group CISO MT
• Global Head, Group Threat Management, TTO Group CISO MT
• CISO, WRB & Markets, TTO Group CISO MT
• CISO, CIB, Core Technology & Functions, TTO Group CISO MT
• Global Head, ICS Risk & Governance, TTO Group CISO MT
• Global Head Cyber Security Operations, TTO Group CISO MT
• Global Head Audit, GSF Internal Audit
• Group Chief Information Security Officer, GSF Risk
• Key Business Stakeholders including: All Business and Function COOs
Our Ideal Candidate
- 10+ years of experience in Portfolio Strategy & Transformation.
- Excellent organisation and leadership skills with ability to manage multiple deadlines and effectively prioritise
- Ability to both assess strategic priorities and to focus on detailed aspects of service delivery in order to drive effective delivery.
- Experience of developing a people strategy, influencing MT & Board stakeholders and decision makers, and executing decisions efficiently and consistently
- Proven ability to lead highly complex, global, pan-bank, multi-year improvement strategies
- Highly entrepreneurial with a high level of energy, dedication, and an unrelenting drive to deliver value.
- Strong sense of personal ownership and responsibility in accomplishing the organisation’s goal. Is confident and will roll-up their sleeves to drive success.
- Able to get things done in a quick-paced environment. Be transparent and open around what doesn’t work and what does
- Personal authority based on established trusted relationships and ability to provide advice and programme direction which is respected at the most senior levels of the Group
- Strong knowledge of the businesses, markets and operations of Standard Chartered Bank and the policies, procedures and processes through which financial crime risks are addressed throughout the Group
- Practical knowledge and experience working with cybersecurity best practices, standards and frameworks such as NIST Cyber Security Framework and ISO/IEC 27001/27002
Role Specific Technical Competencies
- Manage Vendors
- Information Security Policy and Strategy
- Manage Change
- Management of Front-Line Risk
- Strategy & Business Model
- Manage Vendors
About Standard Chartered
We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.
Together we:
- Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
- Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
- Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term
What we offer
In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
- Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
- Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
- Flexible working options based around home and office locations, with flexible working patterns.
- Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
- A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
- Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.
Recruitment Assessments
Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.
Visit our careers website www.sc.com/careers
