Associate Director, Third Party Intelligence & Investigations

Job Summary

Client & Third Party Security (CTPS) is a specialist team within the Bank’s Group Threat Management (GTM) function, forming part of Information & Cyber Security (ICS) function. The team plays a critical role in delivering the Group’s ICS Strategy by helping build a comprehensive, threat-focused understanding of its external ecosystem, including third party vendors, key partners, and clients. CTPS helps protect the Bank by managing third-party cyber risk end-to-end through delivery of Third Party Security Assessments, contractual control oversight, third party continuous monitoring, detection, analysis and investigation of third party incidents, and targeted remediation of third party security observations. As the threat landscape continues to evolve, CTPS is going through an exciting transformation to become more threat-led, risk-focused and efficient — strengthening supply chain security capabilities and improving detection and remediation of interconnected third-party risks.

The Associate Director, Third Party Intelligence & Incident Investigations will be part of a specialist team responsible for the proactive detection, analysis and investigation of cyber security incidents impacting the Bank’s third party ecosystem. Sitting within CTPS, this role will play a critical part in strengthening the Bank’s ability to identify emerging third party threats, assess potential exposure, coordinate response activity and clearly articulate risk to senior stakeholders.

The successful candidate will bring deep expertise across a broad range of cyber security domains including cyber threat intelligence, forensic investigations, incident response and third party security risk management. They will be responsible for supporting investigations into third party incidents and ensuring findings are translated into clear business, operational, client and regulatory risk insights. The role will require strong judgement in high-pressure situations, including determining the potential impact of incidents on Bank data, services, systems, clients and critical third party dependencies.

This role will also be responsible for engaging directly with senior internal and external stakeholders, including CISOs, CIOs and senior representatives of breached or impacted third parties. The role holder must be able to communicate clearly, challenge effectively, obtain meaningful assurance from third parties and brief complex technical and investigative findings in a clear, concise and business-relevant manner.

As CTPS continues to strengthen its threat-led and intelligence-enabled approach to third party security risk management, this role will be central to ensuring the Bank remains responsive to a fast-moving external threat landscape.

Key Responsibilities

Strategy
•    Support the ongoing maturity of CTPS’ third party incident investigations and intelligence programme, ensuring alignment with the wider ICS strategy and the Bank’s approach to managing third party cyber security risk. 
•    Support the evolution of third party incident detection and investigation capabilities to ensure the Bank remains responsive to a fast-moving, increasingly complex and supply-chain-focused external threat landscape. 
•    Identify and implement opportunities to enhance the Bank’s overall security posture through new detection capabilities, improved intelligence workflows, enhanced investigation standards and broader programme improvements. 

Business
•    Maintain awareness and understanding of the Group’s business strategy, operating model and third party ecosystem.
•    Facilitate business continuity by proactively identifying, assessing and helping mitigate cyber threats targeting the Bank’s clients, third party suppliers and wider supply chain.
•    Lead engagements with Contract Managers when investigating third party compromises, ensuring business stakeholders understand potential impact, required actions and escalation pathways. 
•    Translate complex cyber threat intelligence and investigation findings into clear business, operational and regulatory impact assessments. 

Processes
•    Responsible for operating third party incident detection, triage, investigation, impact assessment and intelligence reporting processes. 
•    Ensure suspected third party incidents are recorded, validated, investigated, classified and escalated in line with CTPS operating procedures and relevant incident management requirements. 
•    Maintain rules, alerts and workflows to enhance discovery of relevant intelligence across threat intelligence platforms, monitoring tools, dark web sources, ransomware leak sites and other relevant intelligence sources. 
•    Pivot on relevant Indicators of Compromise, including domains, IP addresses, infrastructure, threat actor identifiers and other artefacts, to investigate associated threats, actors, infrastructure and potential Bank exposure. 
•    Adopt consistent investigation standards, evidence requirements, quality assurance expectations and documentation practices. 
•    Ensure lessons learned from investigations are fed back into relevant control domains, including threat detection, continuous monitoring, third party reassessments, control uplift and executive reporting.

Risk Management
•    Identify, assess, monitor and support mitigation of cyber risks arising from incidents impacting the Bank’s third party suppliers, clients and broader third party ecosystem. 
•    Ensure timely escalation of material third party incidents, suspected compromises, control weaknesses and emerging threat trends through appropriate CTPS, ICS and Group risk channels. 
•    Provide risk-based recommendations to support containment, assurance requests, remediation actions, reassessment triggers, continuous monitoring prioritisation and potential disconnection decisioning. 
•    Support responsibilities under the Group’s Risk Management Framework by ensuring third party incident risks are identified, assessed, documented, escalated and monitored in a controlled and consistent manner. 
•    Provide effective challenge where third party responses, assurance evidence, remediation plans or business risk decisions do not sufficiently address the underlying cyber risk exposure.

Governance
•    Ensure the effectiveness of third party incident detection, investigation, reporting and response arrangements, and suggest improvements where required. 
•    Ensure that outputs from third party incident investigations are aligned to CTPS governance requirements, ICS risk appetite, incident management expectations and relevant regulatory considerations. 

Regulatory & Business Conduct
•    Display exemplary conduct and live by the Group’s Values and Code of Conduct. 
•    Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
•    Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

Key stakeholders

•    Head, Client & Third-Party Security
•    Director, Third Party Intelligence & Investigations
•    Global Head, Group Threat Management
•    Cyber Intelligence Centre
•    Threat Assessment & Countermeasures
•    Market, Business and Function CISOs
•    Technology & Operations Third Party Risk Management Utility team
•    Supply Chain Management
•    Group Threat Management 1st Line Risk & Control team
•    Operational, Technology & Cyber Risk team

Other Responsibilities
•    Embed Here for good and Group’s brand and values in the CTPS team

Skills and Experience

•    Effective communications (written and verbal)
•    Incident management
•    Cyber threat intelligence
•    Third party security risk
•    Forensic investigations
•    Stakeholder engagement

Qualifications

•    Languages: English (Fluent) Is Essential 

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.