Vista previa de la oferta
Associate Director, OTCR, ICS & Tech Risk Assurance (Malaysia/ Poland)
senior · Audit & Accounting
Job Description Apply now Requisition Number: 56858 Job Location: Kuala Lumpur, MYS | Warsaw, POL Global Grade: Band 6 Work Type: Hybrid Working Employment Type: Permanent Posting Start Date: 26/06/2026 Posting End Date: 24/07/2026 Job Description:Job Summary
This role could be based in Malaysia and Poland. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based.
Assurance is a Second Line of Defence function established under a delegated Mandate from the Group Chief Risk Officer. The primary role of Assurance is to provide a risk-based independent view to Senior Management in the business/functions, Second Line and the Board as to the effectiveness of the Bank’s policies, processes, systems and controls. It facilitates identification of gaps and inefficiencies, enabling prompt corrective action to be taken, and is a key source of evidence for the Board and regulators.
The Associate Director, OTCR, ICS & Tech Risk Assurance is a permanent role that requires good business acumen and a detailed knowledge of risk assessment, audit execution and control testing. The successful candidate will have key skills in critical thinking, problem solving, industry specific technical and regulatory knowledge, and stakeholder management, and be able to respond in a flexible and collaborative manner to evolving business, regulatory and threat demands. The role reports directly to the Director, OTCR, ICS & Tech Risk Assurance. The Associate Director will work closely with key stakeholders to address Technology and Cyber risks as an identified “top risk” for the Bank and align these to the Bank’s Enterprise Risk Management Framework (ERMF), Operational and Technology Risk Framework, and Information & Cyber Security Risk Framework (ICS).
This is a senior level role, and the individual will be required to engage with senior stakeholders across the business, technology, governance, CISO and other risk functions to act as an independent trusted advisor, providing key insights from testing to enable effective risk decisions making.
The successful candidate will be able to support the Head of Assurance, a high performing team to identify and focus reviews on the areas of highest Cyber and Technology Risk risks, providing insights which enable uplift of the OTCR risk posture. It is critical therefore, to have senior stakeholder engagement, liaison, and negotiation experience, along with strong communication skills, and an ability to create a compelling, yet simplistic vision, for others to follow.
We are seeking an experienced and senior Associate Director who will be responsible for the following areas:
Key Responsibilities
Business
• Support the Head of Assurance to define, develop and operationalise the OTCR ICS & Tech Risk Assurance team to align with the
risk management strategy and wider enterprise risk management strategy for the Bank Enterprise Risk Management Framework(“ERMF”).
• Support the Head of Assurance to define and develop structured Assurance capabilities and to lead/ execute risk-based
independent reviews of control efficacy by assessing the design and operating effectiveness of key controls.
• Provide the management and validation of findings identified in Assurance ICS & Tech risk reviews.
• Work with the wider OTCR Assurance & Testing team to support and deliver a risk-based plan to focus testing on areas of highest risk.
• Communicate complex risks, issues and testing insights precisely and effectively to management and regulators as required.
• Drive and support internal growth initiatives to upskill staff competencies, optimise resources/capacity, enhance digital agility and identification of risk hotspots for assurance work.
• Drive, collaborate and support cross-functional initiatives to drive greater efficiency and effectiveness.
• Building and promote good external partnerships with stakeholders to collaborate effectively.
People & Talent
• Ensure that holders of all critical functions are suitably skilled and qualified for their roles ensuring that they have effective supervision in place to mitigate any risks.
• Lead through example and build the appropriate culture and values.
• Set appropriate tone and expectations from team, working in collaboration with stakeholders, whilst upholding and reinforcing the independence of the second line.
• Establishing constructive relationships with Key Stakeholders (as defined below)
Regulatory & Business Conduct
• Display exemplary conduct and live by the Group’s Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across
Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.
• Effectively and collaboratively identifying, escalating, mitigating and resolving risk, conduct and compliance matters.
• Demonstrating leadership ability to ensure that the team achieves the outcomes set out in the Bank's Conduct Risk framework.
• Providing ongoing reporting of risk exposure into governance meetings and to key stakeholders and escalating any blockages to
progress to ensure Group MT, Risk & CFCC, and OTCR Scorecard objectives are met.
Key stakeholders
• OTCR LT
• OTCR SPOC
• ERM – Frameworks & Policy
• ERM - Risk Appetite
• Head of Technology & Cyber Audit
• Group, Business and Functions CIOs
• Group Head of ICS, Technology & Architecture
• Group, Business and Functions CISOs
Other Responsibilities
• Embed Here for good and Group’s brand and values in OTCR Assurance and Testing function; Perform other responsibilities assigned
under Group, Country, Business or Functional policies and procedures.
Skills and Experience
Skills
• Personal authority based on established trusted relationships and ability to provide advice and functional direction which is expected at senior levels of the Group and respected by peers
• Good knowledge of the businesses, markets and operations of Standard Chartered Bank and the policies, procedures, and
processes through which Technology and Cyber Risks are addressed throughout the Group
• Proven ability to support highly complex, global activities through influence and credibility rather than command and control
• Ability to understand strategic priorities and focus on detailed aspects of a function in order to drive effective delivery
• Excellent analytical skills: ability to think clearly and rigorously about how best to assess existing and emerging risks and readiness, being able to reach a pragmatic approach and direction.
• Experience of identifying risks (both existing and emerging), developing mitigation actions, and reaching agreement with stakeholders on the management of risks and issues.
• Situational context aware with ability to facilitate outcomes where priorities and personalities are in conflict
• Sound judgement and anticipation and strong integrity, independence and resilience
Communication Skills:
• Excellent English oral and written skills
• Ability to communicate and explain complicated risk issues to internal and external stakeholders in a simple and business-friendly way
• Able to challenge constructively in a non-confrontational manner
• A self-starter, able to take initiation, to navigate within the approved parameters to work out a sensible and practical recommendation or decision
• Ability to participate within a multi-disciplinary team and be a strong team player
• Ability to identify opportunities for continuous improvements
• Strong emotional and cultural intelligence, being able to embrace and drive diversity of thought through inclusion and the valuing of cultural diversity
Qualifications
• Degree level education or equivalent
• Industry related qualification in Operational Risk Management or Information & Cyber Security, such as CISSP, CISM(P), and/or CRISC
• Industry related qualification in Assurance/Audit such as CISA, IIA, CIA and/or CRMA
Role Specific Technical Competencies
• Analytical Thinking
• Information and Cybersecurity Risk Management
• Information Assurance
• Information Security Audits
• Information Security Technologies
• Manage People
• Manage Vendors
• Operational and Technology Risk Management
• Software Security Assurance
• Written Communications
About Standard Chartered
We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.
Together we:
- Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
- Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
- Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term
What we offer
In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
- Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
- Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
- Flexible working options based around home and office locations, with flexible working patterns.
- Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
- A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
- Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.