Vice President, OTCR, CISO & COO Malaysia

Position: Vice President, OTCR, CISO & COO Malaysia)
Location: Bengaluru

This job is with Standard Chartered Bank, an inclusive employer and a member of my Gwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.

Job Summary   This role could be based in India and Malaysia. When you start the application process you will be presented with a drop down menu showing all countries, Please ensure that you select a country where the role is based.

• The Group Operational, Technology and Cybersecurity Risk (OTCR) organisation is instrumental in protecting and ensuring the resilience of Standard Chartered Bank's data and IT systems by managing technological, information and cyber security (ICS) risks across the enterprise.

• As a critical function reporting into the Group Chief Risk Officer (CRO), Group OTCR serves as the second line of defence for assuring Operational, Technology and ICS controls are implemented effectively and in accordance with the Enterprise Risk Management Framework (ERMF) and the ICS Risk Type Framework, and for instilling a positive culture of Operational, Technology and Cybersecurity risk management within the Bank.

• As part of the function, the team of OTCR, CISO & COO performs a pivotal role as an extension of the OTCR  in supporting the Tech and ICS risk management strategy, governance, advisory and assurance roles that face off to the Client Businesses, Regions, and Functions.

• Strong technical knowledge in ICS controls domains - Identity and Access Management, Authentication Security, privilege Access Management and cloud IAM solutions.

Key Responsibilities    Strategy

• The Operational, Tech and Cybersecurity Risk Officer for Group Transformation, Technology & Operations (TTO) is a permanent strategic role that requires strong business acumen, deep knowledge and in-depth experience of Technology and Information and Cyber Security (ICS), particularly technical understanding of Authentication & Authorisation Security, Expertise in Privilege Access Management, Cloud IAM across multiple CSPs and hybrid identity integrations, exposure to UEBA and Zero Trust controls for Identity Security and Knowledge of identity-based attack techniques.

• The successful candidate will have a strong understanding of operating in a second line capacity within an ICS or risk management organisation, and can respond flexibly and collaboratively to evolving business, regulatory and threat requirements. This role within OTCR  for TTO CISO & COO will work with other OTCR Coverage and SME teams to address Tech and ICS as a principal risk types for the Bank and support its integration into the Bank's overall Enterprise Risk Management strategy.

The role will provide oversight and challenge of Tech and ICS risk management and control effectiveness as a risk partner to TTO as defined in the Bank's Enterprise Risk Management Framework (ERMF) and ICS Risk Type Framework under delegation from the Global Head of OTCR.
Business

• The role delivers services that continually monitor the Tech and ICS threat landscape, undertake constructive and robust oversight of the effectiveness of Tech and ICS controls and risk remediation strategies, and ensure accurate, insightful, and transparent Tech and ICS risk reporting is provided to senior management to provide them appropriate assurance and confidence on the TTO CISO & COO risk profile.

• We are seeking an information and cyber security risk specialist to deliver a range of activities associated with the discharging of OTCR second line responsibilities. This role will have considerable engagement with all business units, risk committees, and other stakeholders across the bank, but especially those in TTO covering Cyber Operations and Group Threat Management domains.
Processes
The major functional activities that the OTCR, CISO & COO will lead and manage are:

• Overseeing and challenging 1st line Tech and ICS risk proposals and risk-taking activities for Identity and Access Management, Privilege Access Management ensuring least-privilege, segregation of duties, and zero trust principles.

• Ensures that privileged access risks are identified, assessed, and effectively mitigated across…