Lead Risk Manager - International Markets (Malaysia,India)

Job Summary

This role could be based in Malaysia or India. When you start the application process you will be presented with a drop-down menu showing all countries, please ensure that you only select a country where the role is based

The Risk Manager - International Markets supports effective risk identification, risk assessment, risk management and risk reporting across assigned Technology & Operations International Markets. The role provides independent risk governance, oversight and constructive challenges to support effective risk ownership across assigned International Markets., helping management maintain a sustainable control environment within approved risk appetite and applicable regulatory expectations. 

The role works closely with country and regional management, process and control owners, CIO and COO organisations, specialist Risk Framework Owners, Risk & Governance teams, 2LoD, and Group Internal Audit. The role translates Group requirements into locally relevant risk actions, identifies common themes and read-across implications, supports regulatory and audit engagement, and provides clear management insight on material risks, control weaknesses, issues, events and remediation. 

This requires strong judgement in balancing consistent Group standards with differing country requirements, business models and control maturity. Success is measured through timely risk identification, effective challenge, complete evidence, sustainable remediation, improved control performance and concise decision-useful reporting to country, regional and Group governance forums. 

Key Responsibilities

T&O International Markets Risk Oversight

• Maintain an integrated view of multiple Principal Risk Type across the assigned International Markets portfolio, covering countries, businesses, functions, services, applications, and change initiatives.
• Identify, assess, and monitor material risks and exposures, including risk appetite breaches, control performance, issues, events, audit findings, regulatory commitments, and remediation actions.
• Analyse risk trends, concentrations, and interdependencies, with a focus on shared platforms, third parties, cross-border operating models, and common failure themes.
• Provide risk-based challenges and escalation of material exposures, ensuring timely management action on critical services, regulatory obligations, and significant transformation programmes.

Country Applicability and Regulatory Alignment

• Drive implementation of Group risk frameworks across International Markets, ensuring appropriate consideration of country and legal entity regulatory obligations.
• Assess and challenge local regulatory compliance, including policy applicability, control adequacy, deviations, exceptions, and additional country-specific requirements.
• Maintain end-to-end traceability between regulatory obligations, risk assessments, controls, evidence, issues, and governance decisions.
• Provide oversight of regulatory responses and exception management, ensuring decisions are evidence-based, appropriately governed, and supported by clear ownership, compensating controls, and review arrangements.

Risk and Control Self-Assessment
• Lead risk assessments and RCSA activities across assigned countries and processes, ensuring robust evaluation of inherent risk, control effectiveness, and residual risk.
• Provide effective challenge on risk and control design, ensuring assessments are evidence-based, clearly documented, and reflect country-specific requirements, shared-service dependencies, and emerging risks.
• Drive consistency and quality assurance across risk assessments, promoting alignment of ratings, rationale, and treatment decisions across markets.
• Identify and escalate control gaps and risk exposures, recommending control enhancements, risk acceptance, or formal remediation where required.
• Challenge control sustainability and effectiveness, ensuring controls operate as intended, are supported by adequate evidence, and address relevant risks and dependencies.
• Assess end-to-end control environments, including locally operated and Group-provided controls, reconciliations, attestations, access controls, and management review activities.
• Deliver evidence-based assurance and findings, maintaining clear traceability to requirements while coordinating with 2LoD and GIA functions to optimise assurance coverage and address control gaps.

Issues, Events and Remediation

• Lead the management of risk issues and events, ensuring materiality, impact, root cause, and potential read-across implications are appropriately assessed.
• Challenge and oversee remediation plans, ensuring clear accountability, realistic milestones, effective interim controls, and sustainable resolution of underlying causes.
• Monitor and escalate high-risk exposures, including overdue actions, remediation delays, and residual risks requiring management attention or formal acceptance.
• Validate issue closure and drive continuous improvement, confirming remediation effectiveness through objective evidence, post-implementation monitoring, and the sharing of lessons learned across International Markets.

Thematic and Read-Across Reviews

• Lead thematic and read-across assessments across markets to identify emerging risks, recurring control weaknesses, regulatory concerns, and systemic exposures.
• Assess common dependencies and control effectiveness, evaluating Group-wide controls, shared services, implementation gaps, and variations in local execution.
• Deliver portfolio-level risk insights, identifying systemic issues, trends, outliers, and opportunities to strengthen control effectiveness across International Markets.
• Driving sustainable remediation and governance, ensuring read-across actions are proportionate, traceable, effectively monitored, and supported by clear management decision-making.

Technology & ICS Risk

• Oversee Technology and ICS risk exposures across International Markets and challenge management actions to maintain risks within approved appetite.
• Assess compliance with Group technology, cyber and ICS risk requirements, ensuring country-specific obligations and control expectations are appropriately implemented.
• Review material technology and cyber incidents, issues and remediation plans, ensuring root causes are addressed and lessons learned are applied across markets.
• Provide risk insights and thematic assessments on emerging technology and ICS risks, highlighting systemic concerns, concentration risks, and management action priorities.

Governance and Management Reporting

• Produce risk insights and reporting through dashboards, governance papers, and executive summaries that highlight key exposures, trends, control effectiveness, issues, and decisions required.
• Provide clear and evidence-based risk analysis, distinguishing facts, assumptions, limitations, management judgement, and assurance conclusions.
• Support risk governance and oversight forums, ensuring actions, decisions, escalations, risk acceptances, and approvals are accurately tracked to closure.
• Deliver meaningful management information, focusing on emerging risks, deteriorating trends, overdue actions, and cross-market themes to enable timely and informed decision-making.

Stakeholder Engagement and Capability

• Build strong stakeholder partnerships across Countries, regional, and Group teams, fostering effective risk ownership through constructive challenge and independent judgement.
• Drive clarity of accountability and governance, ensuring clear decision rights, escalation paths, evidence standards, and delivery responsibilities.
• Influence and educate stakeholders on risk management practices, translating complex frameworks into practical guidance and facilitating risk reviews, workshops, and lessons learned.
• Promote a strong risk culture and continuous improvement, coaching teams on risk and control disciplines while driving consistency, automation, and scalable ways of working across the portfolio.

Transformation and Change Risk

• Provide risk oversight across programme lifecycles, covering design, planning, implementation, migration, cutover, operational readiness, and post-implementation review.
• Challenge programme readiness and control effectiveness, including regulatory compliance, country applicability, stakeholder engagement, testing, data migration, resilience, access management, and operational handover.
• Assess programme dependencies and delivery risks, including Group initiatives, shared platforms, vendors, third parties, and contingency arrangements.
• Support informed go-live decisions and benefits realisation, ensuring residual risks are transparent, approvals are accountable, intended control outcomes are achieved, and adoption risks are promptly escalated.

Data Quality, Data Privacy, Records Keeping, Data Sovereignty, and AI Risk

• Oversee information risk management across International Markets, covering data quality, privacy, sovereignty, records management, and Responsible AI risks.
• Assess compliance with data and privacy requirements, including cross-border data transfers, localisation obligations, retention requirements, and applicable regulatory expectations.
• Challenge the effectiveness of data controls and solutions, ensuring authorised repositories, Group platforms, and local implementations adequately meet business and country requirements.
• Coordinate management of information-related risks and incidents, partnering with Data, Privacy, Legal, Compliance, Cyber Security, and AI stakeholders to drive remediation, read-across assessments, and sustainable risk mitigation.

Key stakeholders

• International Markets Leadership: Regional and country CEOs, COOs, CIOs, CDOs and CTOOs.
• Business and Process Owners: Country and Group process owners, product owners, service owners, application owners and control owners 
• Risk and Control: First-line Risk and Control, Governance Risk and Control, Operational Risk and specialist Risk Framework Owners 
• Change and Transformation: Programme sponsors, delivery leads, architecture, testing, migration, change and operational-readiness teams 

Qualifications

• Bachelor’s degree (or equivalent experience) in Risk, Technology, Audit, Business, Finance, or a related discipline.
• Extensive experience in technology, operations, risk, controls, audit, or assurance within complex, regulated, and globally distributed organizations.
• Proven expertise in risk assessment, RCSA, control design and testing, issue management, remediation, governance, and executive risk reporting.
• Strong stakeholder management and regulatory interpretation skills, with the ability to operate across multiple jurisdictions, influence senior stakeholders, and coordinate effectively across all lines of defence.

Technical and Professional Knowledge

• Strong knowledge of risk management and assurance disciplines, including risk appetite, RCSA, controls, issue management, risk events, assurance activities, and audit traceability.
• Expertise in technology and operational risk domains, including change management, resilience, cyber security, data risk, privacy, records management, third-party, and outsourcing risk.
• Experience in regulatory implementation and risk remediation, including country applicability assessments, policy adoption, dispensations, root-cause analysis, thematic reviews, read-across assessments, and sustainable corrective actions.
• Proficiency in programme assurance, risk reporting, and data analytics, with experience using tools such as Power BI, Excel, ServiceNow, Archer, Azure DevOps, Confluence, or equivalent platforms.

Certifications

• Relevant certifications are desirable and may include CRISC, CISA, CISSP, CIA, FRM, ISO 27001, operational risk, audit, data, cloud or programme-management qualifications. 

Skills and Experience

• Project and Programme Management
• Business Analysis and Requirements Management
• Data Visualisation and Tableau
• Data Modelling, Lineage and Data Quality
• Operational Risk and Internal Controls
• GRC Platforms and Risk Reporting
• Internal Controls
• Risk Management
• Operational Risk
• Process Management
• Regulatory Environment - Financial Services
• Standard Operating Procedures

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What We Offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

Recruitment Assessments

Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.

Visit our careers website www.sc.com/careers