Job Summary
The Operational, Technology and Cyber Risk (OTCR) organisation is instrumental in protecting and ensuring the resilience of Standard Chartered Bank’s operations, data, and IT systems by managing operational, technology and cyber risk across the enterprise. As a critical function reporting into the Group Chief Risk Officer (CRO), the Group OTCR team serves as the second line of defense for assuring that controls are implemented effectively, in accordance with the OTCR Framework, and for instilling a risk culture within the Bank.
The Assistant Manager, OTCR Reporting is a permanent role that requires knowledge and experience in data management and governance, development and delivery of internal risk reporting, a deep understanding of the Group’s operational risk events’ standards and a holistic understanding to regulatory expectations on operational loss reporting and data analytics. This role reports directly to the Senior Manager, OTCR Data Governance, Reporting & Analytics.
The purpose of this role is to implement a robust data governance around internal risk reporting framework, identify and enable utilization of accurate and timely risk data, and deliver business efficiencies through automation and process optimization.
Key Responsibilities
Internal Risk Reporting:
• Responsibility for production of OTCR Risk Information Reports for regions, countries, businesses and functions within the Bank.
• Identify and respond to MI and reporting requirements to support the internal reporting requirements and committee paper preparations. Addressing the senior management requests for management information and reporting packs and updates.
• Lead multi-business/function forums and working groups to solution for risk reporting issues, identify actions and drive remediation to completion.
• Lead engagement with key stakeholders to ensure that key risk drivers and business rationales are reflected in the commentary of risk reporting and that adequate attention is drawn on key insights from risk analysis.
• Determine new risk reporting requirements of the bank, continually enhance existing risk information reports and conceptualise development of risk information reports at appropriate levels of granularity.
• Implement automated solutions to monitor data quality and issue resolution
• Set up processes with embedded best in class data management practices
To deliver this the role holder must have:
• Ability to identify and analyze risk data and communicate data-driven insights to wider audience with diverse background
• A collaborative approach to ensure that the needs of stakeholders can be met, in order to support effective risk identification, prioritization and remediation
• An ability to drive innovation and change so as to enhance processes and achieve efficiencies and investment in people to ensure that staff are fully supported to be here for good.
Role Specific Responsibilities:
Strategy
• Prepare reports, packs and MI for senior committees and forums.
• Resolve audit findings; open/close related operational risk issues.
• Maintain a mature OTCR risk reporting process, including effective change management.
• Support OTCR risk type by monitoring OTCR compliance, informing about risk metrics and quarterly risk assessments, and improving control efficiency.
• Develop and support the strategic planning process (incl. prioritisation of strategic initiatives)
• Support the establishment of good culture and corporate identity by developing mission / value statements
• Align processes, resources-planning and objectives with the strategy
• Provide support and insight into significant organizational changes (e.g., shift in strategic focus)
• Support business/ strategic planning activities by providing financial budgets and forecasts
• Address audit issues as they arise, incl. creation and closure of operational risk issues related to specific audit findings
• Support in the preparation of reports, packs and MI to senior executives including to the Board as required and Regulators
• Drive the strategic intent and agenda of the OTCR organisation through excellent reporting, data and MI, processes, and creating visibility of top risks across the Management Team
• Management of headcount, workforce governance, vacancies, and succession planning
• Communicate risk intelligence to stakeholders for principle and sub-risk types of OTCR
• Prepare and present communications and MI to senior management
• Contribute to the development of performance management processes, to encourage the development of an appropriate risk culture and discipline.
• Establish and maintain a mature Risk Reporting Process for OTCR, including effective and efficient change management
• Support the Executive Director, OTCR Data Governance, Reporting and Analytics to build data analytics capabilities in the team with the aim to monitor compliance with OTCR requirements and provide insights for the risk metrics
Business
• Develop and maintain OTCR risk reporting capabilities, tools and processes to meet business needs.
• Deliver timely and accurate OTCR risk reports.
• Improve data management, governance and reporting through appropriate tools, automation and best practices.
• Strengthen data quality controls, escalate issues and support effective continuous monitoring.
• Partner with OTCR data owners to leverage data for risk reporting and insights.
• Maintain clear documentation and control requirements for the risk reporting process
Processes
• Support the build of a mature and sustainable process to deliver timely and accurate OTCR Risk Metrics (data about for example Risk Events, Elevated Residual Risks, ICS Culture Quotient)
• Provide commentary & insights to OTCR Risk Metrics
• Regularly review the monthly and quarterly performance of risk metrics, identifying any patterns, deteriorating trends, or emerging risks for escalation to the RFO or designated delegate.
• Monitor and manage the quality of data used in the OTCR Risk Reporting process (identify and assess issues, monitor closure and mitigation of those issues)
• Collaborate with OTCR Data Providers for timely and accurate metric results as well as metric reading
• Handle Manual Adjustments related to OTCR Risk Metrics (identification, impact assessment, documentation in central repository)
• Establish and maintain OTCR Risk Metrics documentation (including Report Specification, Metric Calculation Logic, List of Critical Risk Measures, List of Critical Data Elements)
• Engage in change risk and impact assessment for reporting changes triggered by Policy, System, Regulatory Changes
• Contribute to the design and implementation of effective continuous monitoring for Data Quality
• Support RCSA for the OTCR Risk Reporting process by providing challenges during KCI design and automations as well as evidencing for existing KCI attestation.
• Continuously look for areas to improve the operational efficiency and effectiveness of the OTCR risk management processes through optimization and automation
Risk Management
• Define and design appropriate MI and communicate via reporting to relevant committees.
• Embed appropriate data quality controls and provide analysis to support effective Risk Management
• Ensure that all activities are in line with and support of the OTCR principal risk type under the Bank’s ERMF
• Ensure all activities are in line with and support the relevant data management and risk reporting internal polices and standards and external regulatory requirements and obligations
• Identify and assess the impact of data quality issues, analyse the root cause and escalate when necessary
• Provide commentary & insights to critical and context OTCR risk metrics
• Ensure early identification and escalation of risks, issues, trends and developments to OTCR and relevant stakeholders.
• Provide insight and guidance on the interpretation of reported exceptions/analytics outputs so that appropriate actions can be taken by the Group OTCR function
Governance
The role holder is responsible for the following:
• Building a strong risk culture and good conduct in the OTCR organization
• Ensure compliance with Group Data Conduct Policy and its standards, Group Data Management Policy and its standards, Risk Reporting and Risk Data Aggregation Standards, and all other standards related to management and utilization of risk data, and risk reporting
Regulatory & Business Conduct
• Display exemplary conduct and live by the Group’s Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.
• Demonstrating leadership ability to ensure that the team achieves the outcomes set out in the Bank's Conduct Risk framework.
Key stakeholders
• OTCR LT
• OTCR SPOC
• Risk & CFCC COO
• Regional CRO
• Country OTCR Teams
• Global Head Reporting, Risk & CFCC
• Group CISO Teams
• TTO Data Domain Owner
• Group CDO Teams
• HR Learning Capability
• Risk BPM Team
• Head Audit
Other Responsibilities
Embed Here for good and Group’s brand and values in the team; Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures; Multiple functions (double hats);
Skills and Experience
Must-have Skills
• Risk and Compliance
• Risk Reporting and Data Governance
• Analytical Thinking
Other Skills
• Microsoft Excel and Data Analysis
• Effective Communication
• Business Partnering
• Business Process Improvement and Change Managementa
Motivations
• Solving complex risk-data and reporting problems with disciplined analysis and sound judgement.
• Turning data into clear insights that strengthen senior-management and committee decision-making.
• Improving controls, data quality and reporting processes through collaboration, innovation and sustainable automation.
Qualifications
Key Experiences
• Experience in OTCR or operational risk reporting, risk metrics, data governance and management information.
• Experience producing senior committee packs and communicating data-driven insights to diverse stakeholders.
• Experience with data-quality controls, RCSA/KCI processes, audit or issue remediation, change delivery and process automation.
• Advanced Microsoft Excel capability; knowledge of SQL and data visualisation tools is advantageous.
Certifications / Qualifications (only where mandatory)
• Industry related qualification in Operational Risk Management or Information & Cyber Security, such as CISSP, CISM(P), and/or CRISC or equivalent experience
• Degree level education or equivalent
Languages
• English
About Standard Chartered
We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.
Together we:
- Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
- Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
- Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term
What we offer
In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
- Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
- Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
- Flexible working options based around home and office locations, with flexible working patterns.
- Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
- A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
- Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.