Vice President, OTCR, TPRM and TPSR(Malaysia /India)

Vice President, OTCR, TPRM and TPSR (Malaysia/India)

This role could be based in India and Malaysia. When you start the application process, you will be presented with a drop-down menu showing all countries. Please ensure that you select a country where the role is based.

The Group Operational, Technology and Cybersecurity Risk (OTCR) organisation is instrumental in protecting and ensuring the resilience of Standard Chartered Bank’s data and IT systems by managing technological, information, and cyber security (OTCR) risks across the enterprise.

As a critical function reporting into the Group Chief Risk Officer (CRO), Group OTCR serves as the second line of defence for assuring Operational, Technology and OTCR controls are implemented effectively and in accordance with the Operational Risk Type Framework (ORTF) for instilling a positive culture of Operational, Technology, and Cybersecurity risk management within the Bank.

As part of the function, the team of OTCR, TPRM, and TPSR performs a pivotal role as an extension of the OTCR in supporting the Tech and OTCR risk management strategy, governance, advisory, and assurance roles that face off to the Client Businesses, Regions, and Functions.

RESPONSIBILITIES

• The Operational, Tech, and Cybersecurity Risk Officer for Group Technology & Operations (T&O) is a permanent strategic role that requires strong business acumen and deep knowledge and in-depth experience of Technology and Information and Cyber Security (OTCR), in Third Party Risk Management [TPRM] and Third-Party Security Risk [TPSR], complemented by general knowledge in other OTCR areas.
• The successful candidate will have a strong understanding of operating in a second line capacity within an OTCR or risk management organisation and can respond flexibly and collaboratively to evolving business, regulatory, and threat requirements.
• The role reports directly to the Global Head, OTCR, CDO, Third Party Risk Management. The OTCR for T&O CISO & COO will work with other OTCR Coverage and SME teams to address Tech and OTCR as a principal risk type for the Bank and support its integration into the Bank's overall Enterprise Risk Management strategy.

Our Ideal Candidate

• Minimum of 5 years of experience in security risk management with a focus on vendor / third-party risk.
• A degree in Information and Cyber Security or Technology or equivalent.
• Financial Institutions / Outsourcing / Vendor Management with previous experience in supporting Third Party Risk Management or within Third Party Management or Third-Party Security 1st line or 2nd line.
• Understanding of vendor lifecycle, including onboarding, ongoing compliance, and offboarding.
• Excellent understanding of Non-Financial Risk Management (Operational risk management) and Risk and Control Self Assessment framework [RCSA].
• Good negotiating and stakeholder management skills.
• Strong knowledge of regulations related to Outsourcing.

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you.

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial, and social wellbeing.

Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.

Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum), and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.

Flexible working options based around home and office locations, with flexible working patterns.

Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform.

A continuous learning culture to support your growth, with opportunities to reskill and upskill.

Being part of an inclusive and values-driven organisation, one that embraces and celebrates our unique diversity.