JOB SUMMARY
- The Group Chief Information Security Officer (CISO) organisation is instrumental in protecting and ensuring the resilience of Standard Chartered Bank’s data and IT systems by managing Information and Cyber Security (ICS) risk across the enterprise. As a critical function reporting into the Group Chief Technology, Operations and Transformation Officer, the Group CISO serves as the first line of defence for assuring ICS controls are implemented effectively and in accordance with the ICS Risk Framework, Policy and Standard, and for instilling a culture of cyber security within the Bank.
- The Group CISO is central to ensuring the Bank’s ability to meet its ICS commitment to internal and external stakeholders, including regulators, as well as maintaining an acceptable ICS risk profile that is regularly reported to the Board, and that is supported by the Group ICS Risk & Governance Function.
- This role, Lead, ICS Committee and Regulatory Engagement will support the Head, ICS Committee and Regulatory Engagement to ensure timely and accurate updates and visibility are provided to various committees and major regulators on our progress against committed deliverables and any other ad-hoc queries/requests. The role also includes active management of any topics which may adversely impact our regulatory relationships (including an impact on our risk appetite), and supporting the reporting of this to regulators and committees.
RESPONSIBILITIES
Strategy
- Awareness and understanding of the Group’s business strategy and model as needed to deliver on the role
- Understanding of the strategies for Technology, Transformation and Operations, as well as Group Information and Cyber Security
Business
- Support an accurate, coherent and consistent narrative across key regulators and internal committees.
- Support the execution of a pro-active regulatory (& committee) engagement plan which drives a consistent and timely understanding of the ICS strategy, focus areas, risk profile, challenges, and achievements
- Identify any areas which may adversely impact our relationship with key regulators. Actively manage these areas through planning, tracking, governance reporting and escalation in order to drive their successful delivery and prevent any adverse impact on our regulatory relationships.
- Support the definition and execution of the most efficient model for committee and regulatory reporting (e.g. automation; define once use many; self service).
- Understand the substance of the ICS strategy, focus areas, risk profile, challenges and achievements, such that the Committee & Regulatory Engagement Team add value to the reporting and commentary (e.g. provide interpretation of the data), rather than being facilitators
- Drive high value and high-quality content by challenging the accuracy, status and narrative of content
- Support in the preparation of stakeholders for all committee and regulatory meetings, with a logical narrative and key data points, plus answers to any foreseen ‘challenge’ questions
- Ensure all committee and regulatory submissions are of high quality and delivered to schedule
- Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.
- Identify and escalate (if needed) risks and issues in a very timely manner.
- Work collaboratively with key representatives from Risk, Technology and Business Line groups, as well as analysts to extract data around existing controls, programs, etc.
- Establish robust working relationship with stakeholders in ICS.
- Ability to work under high pressure, tight timelines, high volumes.
- Organise and run workshops / governance forums with stakeholders of all seniority levels.
- Work to highest quality standards regarding execution discipline and attention to detail, being able to demonstrate proven meticulous execution discipline.
Processes
- Support the definition of simple, consistent and repeatable processes with secretariats, TTO BPM and ICS MT
- Drive automation and simplification across the committee and regulatory reporting
Risk Management
- Work with stakeholders across ICS to understand risks and issues that may impact timely delivery and put in place appropriate controls and measures to facilitate the effective escalation to senior management.
Governance
- Provide inputs to investment requests as required.
- Responsible for the delivery of governance reports as required.
Regulatory & Business Conduct
- Display exemplary conduct and live by the Group’s Values and Code of Conduct.
- Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
- Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.
Key Stakeholders
- Group Chief Transformation, Technology & Operations Officer (GCTTOO)
- Group Chief Risk Officer (GCRO)
- Group Chief Information Security Officer (CISO)
- Group Operational Technology and Cyber Risk (OTCR)
- Global Head of ICS Risk and Governance (R&G)
- ICS Management Team (MT) Members
- Chief Information Security Officers (CISOs) across all businesses and functions
- COOs/CIOs of different businesses/functions
- ICS Risk and Governance Management Team (R&G MT) Members
- Group Internal Audit (GIA)
- Regulatory Liaison Team
Other Responsibilities
- Embed Here for good and Group’s brand and values in ICS R&G; Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures; Multiple functions (double hats)
Our Ideal Candidate
- 10+ years of experience in Banking/Financial Services.
- Individual must have a strong command of the Business language (both written and verbal) to ensure Board papers can be appropriately written.
- Confidence to engage clearly and succinctly with senior stakeholders in the Bank (including members of the CEO’s management team)
- Pro-active individual with the ability to work under high pressure and with close attention to detail.
- Experience in creating materials for governance committees – ideally including written papers submission to risk committees of the Bank.
- Prior experience with regulatory engagements, including the development of an overall narrative and materials, would be ideal.
- Project management skills to enable clear planning of the work required.
- Accuracy and attention to detail
- Ability to develop strong and collaborative relationships across a variety of stakeholder groups.
- Project Management certifications preferred for example PMP, Certified Scrum Master, Certified Product Owner, etc.
Role Specific Technical Competencies
- Risk Management
- Analytical Thinking
- Planning: Tactical, Strategic
- Managing Change
- Accuracy and Attention to Detail
- Project Management
About Standard Chartered
We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.
Together we:
- Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
- Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
- Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term
What we offer
In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
- Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
- Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
- Flexible working options based around home and office locations, with flexible working patterns.
- Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
- A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
- Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.
Recruitment Assessments
Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.
Visit our careers website www.sc.com/careers
