Job Summary

•    The Operational, Technology and Cyber Risk (OTCR) organisation is instrumental in protecting and ensuring the resilience of Standard Chartered Bank’s operations, data, and IT systems by managing operational, technology and cyber risk across the enterprise. Group OTCR team serves as the second line of defence for assuring that controls are implemented effectively, in accordance with the OTCR Framework, and for instilling a risk culture within the Bank. 
•    The Compliance and Financial Crime Risk (CFCR) organisation partners with internal and external stakeholders to achieve the highest standards in compliance and financial crime risk issues to enable a sustainable business and to fight financial crime. As a function, CFCR acts as the second line of defence by setting out the compliance and financial crime framework with the aim to:
•    Ensure full compliance with home and local regulatory expectations through managing data conduct, market conduct, client conduct, regulatory conduct, conflicts of interest and non-financial regulatory reporting requirements
•    Protect our clients and communities against money laundering, terrorist financing, sanctions, fraud and other risks, applying core controls such as client due-diligence, screening and monitoring, and strengthening our people’s understanding as to how to identify, manage and mitigate such risks. In addition, anti-bribery and corruption controls aim to prevent colleagues, or third parties working on our behalf, from engaging in bribery or corruption.
•    OTCR and CFCR are critical functions reporting into the Group Chief Risk Officer (CRO) within the Bank. 
•    The Director, OTCR & CFCR, Functions, is an important role that requires solid business acumen and a detailed knowledge of the Functions area and understanding of working in a second line capacity within a risk management and compliance organisation. This role is responsible for delivering a unified second line of defence for non-financial risk management of Group Functions within Standard Chartered Bank.  The role reports directly to the Global Head, OTCR and CFCR, Functions.

The purpose of this role is to act as the single point of contact (SPOC) within the second line for the Functions area, in respect of all OTCR and CFCR matters and decisions, providing judgement-based input and advice to ensure effective risk management. Be a trusted partner and collaborate with senior stakeholders including SMEs to ensure that risk management practices are integrated into all aspects of the Functions area. In addition, the role holder provides support to the Global Head, OTCR & CFCR, Functions to execute for the following:
•    Support the Group meet its commitment of being "Here for Good" by building a sustainable framework that places OTCR and CFCR best practice standards, at the forefront of the Group's agenda.
•    As an independent second line risk control function, the relevant aspects of the OTCR and CFCR Frameworks through robust independent risk control and the provision of specialist advice and constructive challenge in a manner proportionate to the nature, scale and complexity of the Group Functions.
•    Maintain independence, deliver timely responses, and timely escalation of risks and issues where the management tolerance of the firm (i.e. risk appetite) is exceeded.
•    Maintain constructive and effective stakeholder relationships with the relevant business and supporting functions. 
•    Support the management of regulatory relationships with all of the Group’s regulators, whose rules the Group is subject to.
•    For clarity, the first line is responsible for the implementation of OTCR and CFCR policies and procedures for business processes to the extent the processes have been identified as owned by the Functions, in line with the Group’s process universe as set out in the Group Operational and Technology Risk Framework.

Key Responsibilities

Strategy
•    Help the Bank meet its commitment of being "Here for Good" by building a sustainable framework that places Risk and CFCR best practice standards, at the forefront of the Bank's agenda.
•    Set and implement the vision, strategy, direction and leadership for OTCR and CFCR team, in conjunction  with the Global Head, OTCR and CFCR, Functions that is consistenet with the vision and strategy for the Risk and CFCR function and in support of the Bank’s strategic direction and growth aspirations. 
•    Drive high standards of regulatory compliance and deliver key priorities and initiatives, aligned to OTCR and CFCR’s priorities.
•    As an independent second line risk control function, execute the relevant aspects of the OTCR and CFCR frameworks through robust independent risk control and the provision of specialist advice and constructive challenge.
•    Promote the culture and practice of compliance with OTCR and CFCR standards (including conducting business within regulatory requirements, and to high ethical standards) within the Bank and embed a Here for good culture and the Group Code of Conduct.
•    Collaborate with the rest of the OTCR and CFCR LeadershipTeam to achieve common platforms and work plans, implementing a One Bank approach covering all Clients.
•    Input to Country Business operating model design of relevant OTCR and CFCR and business processes.

Business
•    Oversee the relevant aspects of the OTCR and CFCR Principal Risk Types through robust independent risk control and the provision of specialist advice and constructive challenge.
•    Deliver timely responses and escalation of risks and issues where the management tolerance is exceeded (ie. risk appetite).
•    Build and maintain an effective and constructive relationship with all key business and functional stakeholders that is based on trust, capability and integrity, providing timely, responsive and quality advice to enable the business and functions to meet/ achieve their strategic tactical objectives. 

People & Talent 
•    Lead through example and tone and help to build the appropriate culture and values within the team and across the wider organisation, communicating vision and building commitment and energy to focus on key priorities.

Monitor
•    Risk indicators, metrics, and thresholds – e.g., Risk Appetite thresholds 
•    Completeness and accuracy of risk identification and assessment
•    Regular review of residual risks and concentration of risks (e.g., locations, processes, etc.)
•    Impact to risks / regulations which the bank faces (e.g., through internal / external change or events) 
•    Reporting and escalation of restrictions where the risks not aligned with Risk Appetite
•    Timely and effective completion of actions and treatment plans 
•    Functions adherence to framework, policies, standards, and regulations
•    Appropriate application of decision authorities and delegation rights

Challenge
•    Functions initiatives and decisions to ensure effective adherence of risk, policy, regulations, etc.
•    Outputs of Functions risk identification and assessment activities for completeness and accuracy 
•    Design and implementation of treatment plans / actions to mitigate risk or improve risk mgmt.
•    Risk Appetite Setting: 1LOD proposals on Risk appetite and where Risk Appetite is near breach
•    Proactive challenge on strategy, process, product, channel, change activities 
•    Design and operating effectiveness of controls in place to mitigate material risks

Approve
•    Risk assessment decisions for changes arising from products, processes and projects etc.
•    Treatment plans and actions design to mitigate risks, remediate appetite breaches, improve risk mgmt.
•    Other approvals explicitly required by regulators, frameworks, policies, and standards

In addition, this role must work with SMEs to ensure that there is adequate support provided by the SME in respect of
•    Policy / regulatory interpretation, application, and implementation 
•    Provision of information and guidance relating to risk mgmt. processes and frameworks
•    Appropriate appetite setting, identification and assessment of risk and input into control design
•    Support on investigations and reviews to ensure the right outcomes are reached
•    Regulatory horizon scanning, interpretation, application, and implementation
•    Opportunities for risk taking / commerciality 
•    Identification of emerging and horizon risks in area of expertise 
•    Training and support in communicating complex technical concepts to internal and external stakeholder
•    Advise in matters that are high risk and/or complex to provide specialised knowledge, oversight and/or expertise, using deep technical knowledge, interpretation of regulations with data driven judgment and experience  
•    Analysis of internal and external trends to get early alerts  
•    Thematic reviews with Assurance teams where required

Governance 
•    Attend relevant leadership meetings and represent OTCR and CFCR in the relevant business forums.
•    Provide relevant reports to senior management and governance/risk committees/forums.
•    Propose control effectiveness and efficiency improvements and simplifications where appropriate.
•    Oversee the end-to-end life cycle of OTCR and CFCR risk -related audit, assurance and regulatory reviews is managed appropriately.  Ensure clear ownership in the first line (or SME) which includes their tracking, remediation and preparing lessons learned from such reviews.  
•    Within the Group's Enterprise Risk Management Framework, establish and maintain appropriate risk based OTCR and CFCR framework for identifying, assessing, managing, monitoring, mitigating and reporting compliance (including regulatory and financial crime) risks. 

Regulatory & Business Conduct 
•    Display exemplary conduct and live by the Group’s Values and Code of Conduct. 
•    Effectively and collaboratively identify, escalate, mitigate and resolve regulatory, risk, conduct, financial crime and compliance matters related to businesses.
•    Providing ongoing reporting of risk exposure into governance meetings and to key stakeholders and escalating any blockages to progress to ensure Group MT, Risk & CFCR, and OTCR Scorecard objectives are met.

Key stakeholders
All teams of the following areas that support the assigned portfolio:
•    Chief Risk Officers [for the various Functions]
•    Chief Compliance Officers [for the various Functions]
•    Chief Operating Officers [for the various Functions]
•    Chief Information Officers [for the various Functions]
•    Chief Information Security Officers [for the various Functions]
•    Functional Heads of the various Functions
•    OTCR and CFCR leadership team
•    Head Second Line Assurance [for the various Functions]
•    Head of Audit [for the various Functions]
•    Relevant counterparts in Global OTCR & CFCR Functions team
•    Relevant counterparts in Compliance, Financial Crime Risk compliance teams, including Data Management Risk

Functional Heads example 
•    Includes all relevant first line support functions e.g., Finance/HR CIO, Finance/HR CISO, etc. It will only exclude the representatives of CIB/WRB areas e.g., CIB/WRB Finance or CIB/WRB HR who will be covered by the CIB/WRB OTCR Head. This is to provide clarity and avoid duplication.

Other Responsibilities
•    Embed Here for good and Group’s brand and values
•    Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures 

Qualifications

•    8 years’ experience in OTCR and/or CFCR management
•    At least 10 years’ experience in the banking industry
•    Demonstrate strong understanding of best practice risk management techniques and frameworks, including a rigorous and analytical approach to risk management
•    Understanding of the key features of relevant laws and regulations relevant to the Group and able to demonstrate sound judgement on business practices, regulatory relationship management and reputational risk
•    Excellent analytical skills: ability to think clearly and rigorously about how best to assess existing and emerging risks and readiness, being able to reach a pragmatic approach and direction.

Skills and Experience

•    Business Partnering
•    Operational and Technology Risk Management
•    Risk Management
•    Information and Cyber Security Risk Management
•    Regulatory Environment - Financial Services
•    Data Gathering and Analysis
•    Functions Knowledge
•    Internal Controls
•    Risk and CFCR Policies and Standards
•    Resilience Risk
•    Crisis Management
•    Manage People
•    Relationship Management
•    Effective Communication
•    Business Acumen
•    Managing Change in Agile (NWoW)
•    Regulatory Affairs and Regulatory Change Management

Here are the Future Fit Soft Skills of the Bank to focus on: 
•    Inquisitive, Critical Thinking, 
•    Innovative, Entrepreneurship, and Creativity,
•    Future Ready Leadership and Coaching 
•    Emotional Intelligence, Empathy, Collaboration and Stakeholder Management

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.