Job Summary
• The Global Head, Technology & Operations (T&O) Risk & Governance (R&G) leads the risk management, control capabilities and governance across Technology & Operations (T&O) and seeks to manage risks in a consistent and effective manner. This team has both dedicated, client-centric R&G expertise to drive proactive risk identification and remediation outcomes for critical domain areas across T&O and also specialised capabilities to provide streamlined risk management support, ensuring that risks are governed, assessed, mitigated, and reported consistently.
• The Head of Risk Management is a senior leadership role within the T&O R&G function, accountable for leading the CIOs risk management portfolio and delivering a proactive, forward-looking risk and control agenda across the supported domains, in line with the T&O risk strategy.
• This role ensures that risk frameworks, governance routines, and control programmes are effectively embedded within the First Line of Defence across the CIOs domains, enabling the organisation to anticipate, assess, and mitigate risks. The role provides oversight and effective challenge, drives timely issue identification and remediation, and escalates material risks through the Global Head, T&O Risk & Governance, in alignment with the Enterprise Risk Management Framework (ERMF), Principal Risk Type Frameworks, and the Group’s risk appetite.
• The role supports proactive identification of emerging and horizon risks, governs risk exposure, drives issue remediation, and leads portfolio-level audit and regulatory engagement for the CIOs domains. The individual partners closely with CIO leadership teams and key stakeholders across Technology and Operations (T&O), as well as first- and second-line risk functions and relevant governance bodies, to ensure risk considerations are embedded into transformation initiatives and operational decision-making.
Key Responsibilities
Strategy
• Set the CIOs domain risk management direction and priorities, aligned to the T&O R&G strategy, ensuring risks are identified, assessed, mitigated, and governed effectively.
• Ensure effective implementation of the Enterprise Risk Management Framework (ERMF) and Principal Risk Type Frameworks across the CIOs domains, in line with the Group’s risk appetite, policy requirements, and governance standards.
• Drive the proactive identification and assessment of emerging and horizon risks, ensuring timely escalation and coordinated mitigation plans with CIO stakeholders.
• Provide risk oversight and effective challenge to key transformation and modernisation efforts within the CIOs domains, ensuring risk management is embedded into delivery governance and key decisions.
• Champion risk-informed decision-making by leveraging risk insights, metrics, and analytics to improve risk awareness, prioritisation, and responsiveness across the CIOs domains.
Business
• Partner with CIOs domain leadership teams to strengthen risk culture and ensure risk considerations are integrated into day-to-day operations, strategic change, and key delivery decisions.
• Oversee risk assessments and control testing processes, ensuring that risks are appropriately identified, evaluated, and addressed:
o Risk and Control Self-Assessments (RCSAs): Ensure timely completion of annual RCSA reviews and top-down risk assessments, ensuring an accurate reflection of the risk landscape.
o Threat Scenario Led Risk Assessments (TSRAs): Drive structured TSRAs to evaluate risks across CIO domains.
• Provide risk-based advice and challenge to senior stakeholders, enabling effective risk mitigation and well-informed decision-making.
• Partner with first- and second-line risk functions to ensure a coordinated approach to risk management, risk mitigation, and remediation.
• Lead and coordinate audit and regulatory engagements for the CIOs portfolio, ensuring timely and high-quality responses to internal audit, external assurance reviews, and regulatory inquiries, with escalation and alignment through the Global Head, T&O Risk & Governance as required.
• Oversee the risk-driven management of transformation programmes, ensuring that change risk is effectively governed and mitigated across major initiatives.
Processes
• End to End Risk Management: Lead execution of end-to-end risk management activities across supported domains, including RCSA execution, control mapping, ERR and RTP lifecycle management, and risk appetite monitoring. Support the proactive identification, assessment, and treatment of risk and control gaps, strengthening self-identification of issues and improving Issues Known to Management (IKTM) and Non-Financial Risk Index (NFRI) performance.
• Risk Governance & Committee Management: Provide facilitation and support for relevant T&O risk forums and committees, including preparation and socialization of committee materials, paper development support, and tracking of actions and outcomes.
• Risk Insights & Decision Support: Produce key risk and control MI, analytics, and dashboards. Support development and refinement of KCIs, KRIs, and other key metrics and associated risk data taxonomies and schemas.
• Incident, Crisis & Disruption Risk Support: Provide comprehensive risk management support during operational incidents, crisis situations, and service disruptions across supported domains. Activities include conducting incident risk assessments and managing escalation protocols, crisis governance participation, post-incident reviews, and supporting regulatory notification and reporting efforts.
• Risk Advisory: Provide ongoing checking and challenge of risk and control posture across supported domains. Support the development and refinement of control standards, provide control design guidance and quality assurance, and promote consistent adoption of risk and control practices across 1LoD.
• Material Change & Programme Risk Assurance: Provide key risk oversight and assurance for material change initiatives, technology programmes, and strategic platform and infrastructure initiatives across supported CIO domains. Activities include diagnostic reviews, programme and change risk assessments, operational readiness, cutover assurance, and risk support.
• Regulatory & Audit Risk Management: Provide support for regulatory engagements, audit readiness, and remediation activities across supported domains. Includes provision of domain subject-matter expertise into regulatory responses, RFIs, issue and action tracking across regulatory, GIA, and 2LoD findings, and monitoring of regulatory obligations to support timely closure of issues and sustained compliance.
People & Talent
• Lead and develop a high-performing team (and/or team of managers), with clear accountabilities and effective coverage across the CIOs domains.
• Drive a culture of accountability, risk awareness, and continuous improvement across risk teams, ensuring alignment with Group risk expectations.
• Develop and retain talent through coaching, performance management, and development planning, ensuring strong succession and capability within the portfolio.
• Champion diversity and inclusion, ensuring that risk teams reflect a broad range of perspectives and experiences.
Risk Management
• Embed proactive risk identification and mitigation practices, ensuring risk is managed at both a structural and operational level.
• Ensure risk frameworks and risk appetite parameters are well understood and applied within CIO risk management activities.
• Drive the zero overdue mandate for risk remediation, ensuring that all high-risk issues are addressed and closed within agreed timelines.
• Partner with key leaders across CIO domains and across Technology and Operations (T&O) to ensure that risk considerations are embedded into all business decisions.
• Ensure that key risks are monitored, measured, and reported in a structured, transparent manner, enabling senior leadership and governance bodies to take appropriate risk-based decisions.
Governance
• Oversee risk governance structures, ensuring that domain CIOs’ risk exposure is well-managed within governance forums.
• Provide transparent and high-quality risk reporting to governance committees, senior leadership, and regulatory bodies, ensuring clear visibility into the risk landscape.
• Ensure that risk forums and governance activities align with the Group’s broader risk governance framework
• Lead and oversee function-specific risk governance forums, ensuring risk issues, control gaps, and remediation plans are actively monitored and actioned.
Regulatory & Business Conduct
• Display exemplary conduct and live by the Group’s Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
• Lead the function to achieve the outcomes set out in the Bank’s Conduct Principles: [Fair Outcomes for Clients; Effective Financial Markets; Financial Crime Compliance; The Right Environment.] *
• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters
• Provide timely and accurate risk & control information to support regulatory meetings and RFIs.
Key stakeholders
• Group Head, Technology & Operations
• Group CIO
• Domain CIOs
• Global Head, T&O Risk & Governance and Management Team
• Group and Functional Risk leadership (including GCRO organisation, as required)
• Global Head of OTCR and Management Team
• T&O Management Team (MT) Members and their teams
• Risk Officers across all businesses and functions
• Group Internal Audit (GIA)
• Regulatory Liaison Team
Our Ideal Candidate
- 15+ years of experience in risk management, compliance, assurance or equivalent field, preferably in Banking or Financial Services. A proven track record of leading successful teams is priority.
- Bachelor’s Degree in Information Technology, Cybersecurity, Business Management, or other related discipline. Professional certifications have an advantage (e.g., CISA, CISSP, CISM, ITIL, PMP, CSM, CPO).
- Strong leadership, negotiation and collaboration skills, and ability to work effectively in a complex multicultural and multi-time zone organization.
- Knowledge of the businesses, markets and operations of Standard Chartered Bank and relevant policies, procedures, and processes have an added advantage.
- Excellent interpersonal skills to foster positive relationships with internal and external stakeholders.
- Ability to collect and analyse data and make recommendations in written and oral form.
- Strong ability to liaise with all parts of the Bank, including senior security, risk and business stakeholders.
- Highly effective oral and written communication skills, with an ability to influence and to gain the respect of senior stakeholders and peers.
Role Specific Technical Competencies
- Strong analytical and programme management skills. Ability to assess strategic priorities and to focus on detailed aspects of a programme in order to drive effective delivery.
- Thorough understanding of Technology, ICS, Resilience and Data business processes, risks, threats, internal controls, and experience with regulators and multi-stakeholder organisations.
- Strong experience in first-line risk management.
- Proven track record of implementing risk frameworks end-to-end from a first-line perspective.
- Ability to own and drive risk remediation responsibilities.
- Strong stakeholder management and influencing skills, including handling complex stakeholders.
- Risk Management
- Assurance & Governance
- Business Process Design
- Process Management
- Regulatory Environment
- Data & Reporting
About Standard Chartered
We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.
Together we:
- Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
- Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
- Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term
What we offer
In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
- Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
- Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
- Flexible working options based around home and office locations, with flexible working patterns.
- Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
- A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
- Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.
Recruitment Assessments
Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.
Visit our careers website www.sc.com/careers
Apply now Information at a Glance