Lead, Conformance Testing (India, Malaysia)

Job Summary

This role could be based in India and Malaysia. When you start the application process you will be presented with a drop-down menu showing all countries, please ensure that you only select a country where the role is based

We are seeking an accomplished and forward-thinking professional to join our organisation as the Lead, Conformance Testing. In this pivotal role you will drive the independent controls assessment and thematic risk reviews for Technology in line with Bank’s Enterprise Risk Management Framework.  You will collaborate closely with senior leadership, risk managers and cross functional teams to identify control weakness and thematic areas of concerns. The ideal candidate will possess a strong background in risk management, controls testing, and uplifting control environments. 

Key Responsibilities

•    Drive the planning, execution, and reporting of controls assurance and testing activities for Technology
•    Develop and maintain of the Control Self-Assessment Review methodology, templates (checklist, questionnaire, test scripts/plan, summary reports) and process documentation required
•    Deliver a consistent, sustainable, and re-performable control self-assessment review as per the defined methodology for the upliftment of the bank’s technology environment
•    Serve as a lead for control self-assessment review, ensure appropriate testing or review is performed by control assurance & testing analyst, analyse, and document report findings, and communicate findings to corresponding control/process owners
•    Own the control self-assessment review working papers and reporting capabilities
•    Deliver timely and accurate control self-assessment review results to the respective risk forums
•    Influence opportunities for automation of controls testing
•    Own any ad-hoc or regulatory based control assurance activities as part of the Technology Risk Management Conformance Testing agenda and strategy
•    Assist the team in performing walkthrough and assess the adequacy of existing controls within Technology to ensure completeness, asset coverage, and alignment to Technology Standards
•    Collaborate with the technology domains process owners and the risk managers for driving the review
•    Influence and provide expert guidance and support to technology teams in uplifting controls
•    Partner with Technology Risk Management teams to develop a risk aware culture across the organisation promoting accountability and ownership of conformance testing outcomes
•    Deliver comprehensive reports to senior leadership highlighting potential areas of concern and recommended actions from conformance testing activities
•    Collaborate with internal stakeholders including technology, operations, compliance, and finance to ensure a coordinated and an integrated approach to risk management efforts
•    Additional responsibilities will include participating in any ad-hoc or regulatory based control assurance activities as part of the Technology Risk Management conformance testing agenda and strategy

Strategy
•    Good understanding of Group Technology strategy and its implications managing strategic programs with respect to technology risk management role.  
•    Support the Risk Management leadership team in shaping, defining, and driving longer term Technology risk management conformance testing strategy

Business
•    Maintain strong stakeholder engagement with Technology Services, Operations, CMT(s), Risk & Compliance and Group Internal Audit to ensure alignment across stakeholder groups.

Processes
•    Design and implement the Control Self-Assessment Review methodology and ensure that the Control Self-Assessment review deliverables meets the quality standards set out in the methodology 
•    Support the continuous improvement of control self- assessment review, aligning to and avoiding duplication with other assurance functions
•    Identify opportunities for control automation 
•    Contribute to the development of knowledge base of controls for Control Self-Assessment purpose
•    Escalate appropriately to ensure the Global Head, Technology Risk Management is updated and able to intervene as required.
•    Responsible for ensuring compliance with policies applicable to which impact technology risk. Challenge processes, procedures, and policy if there is opportunity for improvement.

People & Talent
•    Champion and act as a role model of the Group’s values and culture.  
•    Lead and support a change in mindset, building a culture of client centricity, agility, and accountability through standardised metrics and measurement, ensuring everyone in Operations are drivers and owners of client outcomes.
•    Ensure team structure/capacity is reviewed to enable delivery of client outcomes. 

Risk Management
•    Awareness of relevant risk policies/standards, Group Risk Assessment Methodology (GRAM), risk framework owner role, and first line technology risk management role. 
•    Responsible for executing risk management responsibilities of the first line of defence as defined within the Technology Risk Policy and Standard, and Group Technology Policy.
•    Working closely with Risk Owner and Process Owner, Contribute to the team to ensure that all activities are in line with and support of the Operational principal risk type under the Bank’s ERMF 
•    Drive the adoption of risk management framework through Control Self-Assessment review and / or thematic review
•    Work with other control assurance teams to drive efficiency, effectiveness and reduce duplication

Governance
•    Produce trend analysis of common control failures and thematic issues to enable a holistic view of risk management and control assurance
•    Provide regular status updates including tracking against review/testing requirements and plan forecasts
•    Support the provision of timely and accurate control self-assessment review status / updates to the respective risk forums

Regulatory & Business Conduct
•    Display exemplary conduct and live by the Group’s Values and Code of Conduct. 
•    Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
•    Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.
•    Support the Global Head, Technology Risk Management to achieve the outcomes set out in the Bank’s Conduct Principles.

Key stakeholders
•    Enterprise Technology
•    Technology Strategy and Architecture
•    Technology MT
•    Technology Non-Financial Risk Committee
•    Technology Risk Management MT
•    Regional Technology and Country CTMs
•    Risk Framework Owners
•    Functional Partners including Risk, HR, Finance, Audit, etc. 

Other Responsibilities
•    Represent Technology in regulatory reviews and engagement on strategic programme risks as required. 

Skills and Experience

•    Technology Risk Management
•    Control testing and business process modelling
•    Manage Compliance
•    Data analytics
•    Knowledge of relevant industry standards (e.g. NIST, COBIT, ISO/IEC, CCS CSC, etc.)
•    Manage People
•    Business Process Improvement

Qualifications

•    Bachelor’s degree in computer science, software engineering, business management, accounting, finance, or related field.
•    Minimum ten (15) years of technology risk and/or technology audit or compliance experience, preferably in financial institution 
•    Prior experience with technology control self-assessment review, control testing or compliance, control assessment and/or auditing including report writing
•    Strong understanding of Risk Management areas, control testing, risk and control assessment process and compliance/audit fundamentals
•    Strong control mindset, role-modelling the importance of good governance and able to demonstrate courage in challenging processes or practices that fail to deliver a well-controlled business
•    Good understanding of financial institution technology operations and systems.
•    Self-motivated, able to multitask and have an ability to work well where team are based offshore
•    Strong analytical thinking with ability to clearly highlight material findings
•    Strong written & verbal communication skills, report writing skills 
•    Possess the coordination and interpersonal skills required to work across various functions and seniority level globally and locally
•    CISA or similar testing/audit qualifications are considered an advantage
•    Proficiency in risk management frameworks, methodologies, and tools
•    Experience in implementing risk management practises across diverse functional areas and business units is preferred

Competencies

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.