Job Summary

This role could be based in Malaysia and India. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based.

•    Comprehensive vulnerability management tracking and reporting across all operational and executive risk forums to ensure unified visibility into WRB security posture.
•    Drive standardization across cluster CISOs, ensuring aligned execution of Group practices for VM, exception management processes, and ERR TP Action Plans.
•    Collaborate with technology team to understand the underlying infrastructure, mitigating controls and provide a strong narrative on the material impact of the open vulnerabilities. 
•    Support the development and implementation of strategies to mitigate security risks and ensure the confidentiality, integrity, and availability of our systems and data.
•    Manage governance and reporting on vulnerability management across WRB. Close tracking and escalation on critical vulnerabilities (CISO MI) 
•    Managing ERR TP Path To Low updates on vulnerabilities management 
•    Coordinate with Markets to remediate local vulnerabilities and align reporting standards

Key Responsibilities

•    Drive the residual risk assessment of residual vulnerabilities that cannot be remediated immediately and alignment of residual risk rating with OTCR for endorsement.
•    Mandate and oversee the annual penetration test for internet-facing system and crown jewels, ensuring all findings are fixed or formally accepted before go-live.
•    Support the Threat and Governance Team in risk assessment, reporting and forming of the RC update / risk papers / management updates.
•    Monitor the vulnerability management BRAM and TSRA metrics and provide regular updates in CCM, TSRA, RCSA cycles.
•    Negotiate and diligently track remediation timelines for identified CISO MI and key vulnerabilities.  
•    Produce monthly reports on vulnerabilities status for WRB
•    Is accountable for governing and sustaining group-managed risks on vulnerability management across WRB application estate. The role ensures controls are implemented as designed, remain effective, and are supported by accurate, current control-status information.
•    The candidate must be familiar with enterprise level vulnerability management and remediation lifecycles. The candidate will be performing risk assessments and providing a mitigating control narrative as a cyber security expert. Successful candidate is expected to collaborate with technology team to understand the underlying infrastructure, mitigating controls and provide a strong narrative on the material impact of the open vulnerabilities. The candidate will also need to identify opportunities for automation and reducing manual errors and at the same time assist in the improvement of the vulnerability risk assessment framework. 

Skills and Experience

Must-have Skills    
•    Cyber Security & ICS Controls
•    Leadership & Stakeholder Management
•    Vulnerability Management
•    Security Risk Assessment
Other Skills    
•    Process Improvement & Problem Management
•    Change & Programme Management
•    Stakeholder Management & Collaboration
•    PowerPoint, Excel tracking

Motivations

•    Excellent organisation and leadership skills with ability to manage multiple deadlines and effectively prioritise. Continuously upskill to remain current with the cyber threats and security of WRB Business.

Qualifications

Key Experiences    
•    ICS experience especially in banking industry
•    Vulnerability Management
•    Technical ICS skills
Certifications / Qualifications
•    Degree holder
•    CISSP/CISA/CISM other industry security certifications
•    Technical certifications
Languages    
•    English

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.