Job Summary
The Group Chief Information Security Officer (CISO) organisation is instrumental in protecting and ensuring the resilience of Standard Chartered Bank’s data and IT systems by managing Information and Cyber Security (ICS) risk across the enterprise.
Cyber Security Technology domain is central to ensuring the Bank’s ability to meet its ICS commitment to internal and external stakeholders, including regulators, as well as maintaining an acceptable ICS risk profile that is regularly reported to the Board, and that is supported by the Group ICS Risk & Governance Function.
The CST Strategic Technology Lead role provides core Strategic delivery enablement support for the Global Head Cyber Security Technology with a core focus on Strategy, Cyber Operations, Engineering Delivery and Production Support
The role will be responsible for coordinating core management activities and processes required for effective day to day organisation of the CST Chapter including BAU financial management (headcount, vendor and other cost impacting activities), CST operational strategy definition and tracking for execution, vendor management and a broad range of business/service management capabilities.
Key Responsibilities
RESPONSIBILITIES
Strategy
- Capturing the Mission and Vision for the function and ensuring it is aligned to ICS, TTO, Corporate Strategy and Industry strategic themes. Ensure Mission & Vision are clearly communicated & understood across CST & stakeholders and embedded into ICS Protect planning and prioritization of work.
- Development of the CST Strategy to define, plan and coordinate the delivery of the functions long term objectives supporting and contributing to the wider ICS, TTO and Group Strategies. The CST strategy sets out the general direction and principles for the function by providing a desired future state and the high-level steps to achieve, ensuring these are in harmony with the service level strategies across ICS Protect.
- Ensure initiatives to deliver the strategy are signed off by MT & Stakeholders, clearly communicated across ICS Protect, all supporting initiatives are funded in the annual investment cycle and are prioritised as part of ICS Protect Planning & Prioritization (P&P) Forum including obsolescence & vulnerability remediation.
- Ensure strategic outcomes are to be linked to OKRs & Objectives, with regular status reporting and coordination of any corrective measures to meet objectives.
- Collaborating on technology roadmap and solution with the Hive Tech Lead, to drive optimum outcomes alongside the Chief Product Owner.
- Define and communicate CST annual objectives and metrics ensuring alignment to wider ICS, TTO and Group objectives. Establish and manage the framework for measuring performance, aligning, and prioritizing all BAU & Project work against agreed objectives. Provide accurate monthly status reporting in ICS Protect P&P forums, MT Meetings and coordinate any corrective action required to meet objectives that are lagging.
- Accountable for ensuring that engineering, production, and delivery standards are maintained across the teams that comprise the CST Chapter Area
Skills and Experience
Business
- Maintain strong stakeholder engagement with ICS Protect MT, ICS MT, GTO MT, Finance, HR and Vendor Management to ensure alignment across stakeholder groups.
- Work with the ICS Protect MT to ensure work is prioritised across competing demands to achieve the committed outcomes for CST.
- Responsible for the definition, documentation, and continuous improvement of the CST operating model to ensure roles and responsibilities are clearly defined and the function is optimally structured, organised and is within the approved annual budget. Partner with ICS Strategy, Budget & Service Management, Finance, and other stakeholders to manage any change to CST Target Operating Model (for both CST experts within hives and central function) in alignment with organisational standards & targets.
- Technology Resource Demand Management understanding the resource demands for architects, engineers, testers (CG) in conjunction with tech leads and PST.
- Support the Global Head of CST in developing high quality materials at the Stability & Tech Lead Councils to enable clear and transparent reporting of risks, progress, and strategic trends to senior stakeholders across the bank, along with external stakeholders as required. Provide CST wide visibility for all governance forums, reports, engagements, and material submission due dates, ensuring quality materials are published & signed off within agreed timeframes. Provide oversight and ownership of Reporting & Engagement process and drive initiatives to streamline reporting process, drive efficiency and improve quality & accuracy of materials.
- Special Projects: Project Manage and coordinate special projects that span across domains to deliver change and high priority initiatives across CST.
- Communications and Engagement: Partner with TTO Comms team & ICS Protect MT to define and implement annual comms strategy across CST, ensuring the team and our key stakeholders are informed, updated, and engaged on a consistent and regular basis (Examples include all Town Halls, Stakeholder Briefings, People Leader and MT Connect sessions, newsletters, function wide training and development).
- Supporting the Tech Leads and Chief Product Owners to mitigate technical debt and balance risk, and regulatory items with new features, functionality, or changes to keep the cost of change low.
- Working in partnership with Tech Leads and Chief Product Owners to ensure a balance of functional and non-functional requirements are represented in the backlog and that there is an approach to mitigate or avoid technical debt.
- Accountable to regularly review the Squad performance metrics (both in sprint delivery and the performance after go-live) on a regular basis and to use these insights to execute continuous improvement with the Squads in central teams
Risk Management
- Delegated responsibilities across third party agreements and hiring approvals up to approved limit, whilst individual ICS Protect MT members are responsible for their individual budgets, the CST Strategy & Planning Lead provides oversight and support across workforce and vendor management, as such is acts as a partner, and delegated approver, to the ICS Protect Members and aids in highlighting risks and opportunities.
- Exercise urgent and effective remediation of risks and issues impacting the delivery, escalate when appropriate.
Governance
- Support the Tech Leads to secure investment funding to deliver the strategic goals by building a compelling case for change, and by reviewing, challenging, and approving business cases.
- Oversee the definition of a set of key deliverables and KPIs which enable tracking of delivery.
- Support Global Head CST & ICS Protect MT to ensure CST wide adherence to annual conduct & mandatory compliance standards.
- Provide a single group view of current investment programmes and improvement activities that the CST Chapter is supporting.
Regulatory & Business Conduct
- Display exemplary conduct and live by the Group’s Values and Code of Conduct.
- Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
- Lead the team to achieve the outcomes set out in the Bank's Conduct Principles.
- Effectively and collaboratively identify, escalate, mitigate, and resolve risk, conduct and compliance matters.
Key stakeholders
- Global Head, Cyber Security Technology
- ICS Protect Management Team
- ICS Management Team (MT) Members
- Chief Information Security Officers (CISOs) across all businesses and functions
- Chief Information Security Risk Officers (CISRO/ISRO) across all businesses and functions
- COOs/CIOs of different businesses/functions
- ICS Risk and Governance Management Team (R&G MT) Members
- Group Internal Audit (GIA)
- HR Business Partners
- Sourcing & Vendor Management
Processes
- Budget & Cost Management (BAU): Manage the annual BAU budget planning exercise across CST to define and sign-off annual resource and vendor budget requirements. Enhance monthly financial reporting process to drive domain-level budget ownership & accountability ensuring accurate monthly financial reporting and early awareness of any projected overruns. Support CST Global Head in assessing all requests against annual BAU budget prior to approval and coordinate discussions and activities required to reduce any projected overspend and meet annual budget within approved tolerances.
- Demand Management (Investment): Coordinate annual planning exercise for all new investment and projects across CST. Engagement with core stakeholders across BAU, TRP and ICS to ensure requirements, associated costs and dependencies are identified, aligned, and internally prioritised against CST/ICS/Investment Objectives & Strategy. Proposed Investment budget to be socialised and agreed with CST Stakeholders and manage submission from Investment Prioritization through to approval. Ensure work submitted through ICS Protect P&P forum is part of approved investment budget and ensure any future changes are managed through the formal Governance processes & forums (i.e., Investment Prioritization, ICS Protect P&P; ICS RF & QPR)
- Drive continuous improvement within the CST function by supporting and tracking initiatives that champion automation and improved efficiency.
- Participate in the quarterly planning for the central CST team and provide steer along with Tech Lead.
- Helps removes blockers or impediments that hinder product delivery or learning culture.
People & Talent
- Work with HR & ICS Protect MT to define and execute the CS people strategy, including TOM, location strategy, spans & layers, and skill requirements.
- Lead through example and build the appropriate culture and values. Set appropriate tone and expectations across the portfolio and work in collaboration with risk and control partners.
- Supporting the cultivation of a high-performance culture and true ‘self-organising’ team by empowering the Squad, celebrating wins, learning from reviews, and conducting regular retrospectives for continuous improvement.
- Support creating stable and persistent teams for robust performance and keeping intellectual property.
- Continuously showcase product and delivery through internal and external (where relevant) communications, community of practice, engineering demos and learning sessions.
Our Ideal Candidate
- Overall 12+ year of experience IT Industry and 5+ years of experience working in Cyber Environment .
- Maintain strong stakeholder engagement with ICS Protect MT, ICS MT, GTO MT, Finance, HR and Vendor Management to ensure alignment across stakeholder groups.
- Work with the ICS Protect MT to ensure work is prioritised across competing demands to achieve the committed outcomes for CST.
- Responsible for the definition, documentation, and continuous improvement of the CST operating model to ensure roles and responsibilities are clearly defined and the function is optimally structured, organised and is within the approved annual budget. Partner with ICS Strategy, Budget & Service Management, Finance, and other stakeholders to manage any change to CST Target Operating Model (for both CST experts within hives and central function) in alignment with organisational standards & targets.
- Technology Resource Demand Management understanding the resource demands for architects, engineers, testers (CG) in conjunction with tech leads and PST.
- Support the Global Head of CST in developing high quality materials at the Stability & Tech Lead Councils to enable clear and transparent reporting of risks, progress, and strategic trends to senior stakeholders across the bank, along with external stakeholders as required. Provide CST wide visibility for all governance forums, reports, engagements, and material submission due dates, ensuring quality materials are published & signed off within agreed timeframes. Provide oversight and ownership of Reporting & Engagement process and drive initiatives to streamline reporting process, drive efficiency and improve quality & accuracy of materials.
- Special Projects: Project Manage and coordinate special projects that span across domains to deliver change and high priority initiatives across CST.
- Communications and Engagement: Partner with TTO Comms team & ICS Protect MT to define and implement annual comms strategy across CST, ensuring the team and our key stakeholders are informed, updated, and engaged on a consistent and regular basis (Examples include all Town Halls, Stakeholder Briefings, People Leader and MT Connect sessions, newsletters, function wide training and development).
- Supporting the Tech Leads and Chief Product Owners to mitigate technical debt and balance risk, and regulatory items with new features, functionality, or changes to keep the cost of change low.
- Working in partnership with Tech Leads and Chief Product Owners to ensure a balance of functional and non-functional requirements are represented in the backlog and that there is an approach to mitigate or avoid technical debt.
- Accountable to regularly review the Squad performance metrics (both in sprint delivery and the performance after go-live) on a regular basis and to use these insights to execute continuous improvement with the Squads in central teams.
Role Specific Technical Competencies
- Understanding Customer Needs (research, insights & communication)
- Data driven decision making & product analytics
- Business plan – design and execution (tactical and strategic)
- Marketing Strategy and Positioning
- Stakeholder management and communication
- Regulatory Environment – Financial Services
About Standard Chartered
We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.
Together we:
- Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
- Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
- Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term
What we offer
In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
- Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
- Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
- Flexible working options based around home and office locations, with flexible working patterns.
- Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
- A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
- Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.
Recruitment Assessments
Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.
Visit our careers website www.sc.com/careers
