Executive Director, OTCR, Technology Resilience

Job Summary

•    The Group Operational, Technology and Cybersecurity Risk (OTCR) organisation is instrumental in protecting and ensuring the resilience of Standard Chartered Bank’s data and IT systems by managing technological, information and Cyber Security (ICS) risks across the enterprise. 
•    As a critical function reporting into the Group Chief Risk Officer (CRO), Group OTCR serves as the second line of defence for assuring Operational, Technology and ICS controls are implemented effectively and in accordance with the Enterprise Risk Management Framework (ERMF) and the ICS Risk Type Framework, and for instilling a positive culture of Operational, Technology and Cybersecurity risk management within the Bank. 
•    As part of the function, OTCR for T&O performs a pivotal role in oversight of the T&O Group Resilience and Technology & Architecture functions. This specific OTCR role has accountability for 2nd Line of Defence oversight for all OTCR risks as they relate to Technology Resilience outcomes, including the change execution portfolio for key resilience initiatives.
•    The role therefore requires experience working within similar functions in managing the broad range of non-financial risks outcomes for technology resilience (availability, recoverability and restoration) and “joining the dots” to operational resilience processes (continuity planning, continuity planning and continuity in resolution). The successful candidate will bring both risk management oversight experience and technical knowledge on technology resilience controls implemented through modern architecture and software techniques. 
•    We welcome candidates with experience of risk management across any of the three lines of defence, as well as more technical candidates seeking to transition to a second line oversight role from a technical role in technology where they can leverage their deep subject matter expertise in architecture and technology solution design and implementation from their previous roles. 

Key Responsibilities

Strategy
•    The Head Operational, Technology and Cybersecurity Risk (OTCR), Technology & Operations (T&O) Technology Resilience is a permanent strategic single contributor role that requires strong business acumen, deep knowledge and in-depth experience of Resilience encompassing the disciplines across technology resilience, business resilience and the change governance oversight of the various programmes delivering resilience uplifts. 
•    The candidate would be joining at a critical and exciting juncture, as the bank continues to strengthen resilience through transformation change investment. In addition to the second line risk oversight role for operational processes, the candidate will bring a strategic mindset and thought leadership to help bring actionable insights in relation to these improvements delivered though transformation change. 
•    The successful candidate will have a strong understanding of operating in a second line capacity within a risk management organisation, and can respond flexibly and collaboratively to evolving business, operational and regulatory environment. The role reports directly to the second line Managing Director, OTCR, Technology & Architecture and Technology Resilience and will work closely with the OTCR SME / Policy Owner for Client Service Resilience. The candidate will be deep knowledge and experience of technology resilience topics and be able to influence both business and technology enablers to drive positive risk outcomes. 
•    The Head OTCR, T&O Technology Resilience will work with other OTCR Coverage and SME / Policy Owner teams to address the broader OTCR risk types for the Bank and support its integration into the Bank's overall Enterprise Risk Management strategy. 
Business
•    The role delivers services that continually monitor OTCR risk landscape, undertake constructive and robust oversight of the effectiveness of controls and risk remediation strategies, and ensure accurate, insightful, and transparent risk reporting is provided to senior management to provide them appropriate assurance and confidence on the T&O Resilience risk profile.
•    We are seeking a Technology Resilience risk specialist to deliver a range of activities associated with the discharging of OTCR second line responsibilities. This role will have considerable engagement with the T&O Group Resilience stakeholders, Technology & Architecture stakeholders, T&O Programme Managers, the T&O Risk & Control function and OTCR SME / Policy Owners for Operational Resilience.

Processes
The major functional activities that the Head OTCR, T&O Change Portfolio Risk and Insights will lead and manage are:
•    Thought leadership and second line risk opinions on whether the first line processes and change programmes will meet the strategic direction of Resilience policies and risk obligations.
•    Overseeing and challenging 1st line T&O Resilience Risk & Control Self Assessments.
•    Overseeing and challenging 1st line T&O Resilience Response Framework for responding and managing the treatment of Material Risk Events and Elevated Residual Risks.
•    Overseeing 1st line T&O Resilience Transformation Change programmes.
•    Assuring the 1st line implements controls to comply with the OTCR Standard, Operational Resilience Policy, Change Governance Policy and applicable standards.
•    Overseeing implementation and the continual improvement and effectiveness of the controls to mitigate OTCR.
•    Promoting a healthy OTCR risk culture and good conduct within T&O and its various key Programmes. 
•    Supporting the Managing Director, OTCR, Tech & Architecture and Technology Resilience in generating key risk insights to challenge OTCR Risk, oversight of Resilience Portfolio health and Corporate Plan.
People & Talent
•    Lead through example and build the appropriate culture and values.
•    As a single contributor role, the candidate will be expected to support the overall team’s objectives to employ, engage, and retain high quality people, with succession planning for critical roles. 
•    Uphold and reinforce the independence of the second line OTCR function. 
•    Provide guidance and training for OTCR T&O Coverage on managing resilience-related risk types.

Risk Management
•    Support the assessment of OTCR Risk and reporting by T&O 1st line teams.
•    Support the wider OTCR T&O team in the use of the resilience frameworks and other techniques from a 2nd line perspective.
•    Raise visibility of resilience weaknesses to drive improvements and upliftment.
•    Highlight gaps or control weaknesses relating to the Technology Policy, Control Standards., Technical Standards and methodologies related to technology resilience and how these relate to business resilience outcomes.
•    Support the creation of risk mitigation plans calling out where these are ineffective or insufficiently followed.
•    Perform thematic reviews as required by the OTCR T&O team and help develop new risk insights. 
Governance
•    Work with teams within T&O Resilience and participate in work groups and other meetings to understand, advise, and challenge on OTCR Risk matters.
•    Report any OTCR Risk issues for escalation up to the T&O Non-Financial Risk Committee which require attention and support.
•    Ensure consistency of reporting and production of high-quality documentation and materials.
•    Provide recommendations and feedback to OTCR T&O Coverage teams and Second Line Resilience SME based on experience with T&O Resilience.

Regulatory & Business Conduct
•    Display exemplary conduct and live by the Group’s Values and Code of Conduct. 
•    Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
•    Effectively and collaboratively identify, escalate, mitigate, and resolve risk, conduct and compliance matters.
Key stakeholders
•    Group OTCR T&O, Leadership Team and Coverage Officers
•    Group OTCR SME / Policy Owners 
•    T&O Group Resilience 
•    T&O Technology & Architecture
•    Group Internal Audit 
•    Identified business stakeholders
Other Responsibilities
•    Embed Here for good and Group’s brand and values in OTCR; Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures within OTCR T&O covering other domains beyond main domains of responsibility. 

Skills and Experience

•    Crisis Management
•    Contingency and Disaster Recovery
•    IT Service Continuity Management
•    Operational Risk
•    Risk Management

Qualifications

Education
•    A degree level education
Training
•    Minimum 10 years’ experience in operational risk management preferably in the Banking and Financial sector, with 5 years hands-on experience resilience and related risks.
•    Strong knowledge of both business and technology resilience methods, practices and approaches 
•    Strong knowledge of change management best practices and frameworks (e.g. Agile Methods, Project and Programme Management Professional certifications, etc)
Certification
•    Professional Certifications such as ORCE, CORM, PECB, certifications for technology risk and controls such as CRISC and change management certifications such as PMP, CAPM, AgilePM, PMP, PgMP, SAFe are desirable
Languages
•    Excellent written and oral communication and reporting skills in English, ability to present complex Change Risk concepts to non-technical stakeholders

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing  and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle,  continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together,  we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter,  we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance,  with flexible and voluntary benefits available in some locations.
• Time-off  including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working  options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support  through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture  to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation,  one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.