Job Title Here Experience Director

Title: Audit Manager, Information & Cyber Security
Bukit Jalil KL, MY
Job Summary
The Group Internal Audit & Investigations (GIAI) in Standard Chartered Bank is looking for an exceptional and dynamic Audit Manager to join our Information and Cyber Security (ICS) Team with strong technical ICS knowledge on identity and access management, vulnerability management, code security, security operation centre, threat intelligence, red and purple teaming, penetration testing, ICS related industry standards such as National Institute of Standards and Technology (NIST) and Centre for Internet Security (CIS), and risk management.
The Audit Manager will collaborate closely with the Audit Team Lead or Team Manager on the audit assignment and deliver impactful and high-quality audit work within the agreed timelines, budget constraints, and in full alignment with established audit methodology. Furthermore, the Audit Manager will also be responsible for a continuous monitoring of certain domains.
Key Responsibilities
- Support the Head of Audit (HOA) and Senior Audit Managers (SAMs) in GIAI risk assessment and audit planning activities.
- Suggest audits for coverage during the planning cycle based on key ICS risks
- Execute responsibilities in accordance with the Audit Charter, maintaining independence from management and avoiding any interference.
- Actively participate as a team member or leader in assigned audit work
- Ensure audit deliverables adhere to quality standards and timelines according to GIAI methodology.
- Draft contributions to audit scope, including the Audit Planning Memo and Process Risks Controls Matrix
- Assist in drafting the audit issues and report during the audit reporting phase.
- Monitor the remediation of audit issues for assigned audits and validate issues as per the agreed timelines.
- Support high-risk audits of ICS and collaborate with GIAI teams
- Execute audits efficiently, adhering to budget and timelines
- Update Audit Team Lead and Manager on progress and obstacles, ensuring quality standards
- Work with Audit Team Lead and Manager to draft issues, articulate risks, and obtain action plans
- Conduct audit testing using data analytics
- Demonstrate proactivity engagement during team sessions
- Identify growth areas at each audit and collaborate on strategies
- Assist the HOA in managing audit costs within the allocated budget for engagements
- Establish and maintain effective working relationships with the management of relevant ICS units.
Skills and Experience
Technical, Audit and Other Skills Required:
- Strong understanding of identity and access management, vulnerability management, code security, security operation centre, threat intelligence, red and purple teaming, penetration testing, ICS related industry standards such as NIST and CIS, and risk management.
- IT infrastructure components, including servers, networks, databases, and cloud services would be a plus.
- Knowledge of cybersecurity principles, frameworks, and best practices
- Proficiency in audit tools and techniques
- Excellent analytical and problem-solving abilities with a keen attention to detail.
Qualifications
- Education: Bachelor’s degree in information technology, Computer Science, Information Systems, or a related field. A master's degree is a plus
- Experience: Minimum of 5 years of experience in IT auditing, information security, or risk management
- Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Cloud Security Professional (CCSP), and Global Information Assurance Certification (GIAC) related certificates are highly desirable. Other designations such as Certified in Risk and Information Systems Control (CRISC) and Certified Information Security Manager (CISM), and Certified Internal Auditor (CIA) are a plus.
About Standard Chartered
We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.
Together we:
- Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
- Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
- Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term
What we offer
In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
- Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
- Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
- Flexible working options based around home and office locations, with flexible working patterns.
- Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
- A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
- Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.
Recruitment Assessments
Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.
Visit our careers website www.sc.com/careers