Job Summary
This role could be based in Malaysia and India. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based.
Third Party Resilience forms part of the Group’s overall resilience capability that is centred upon the services supplied by Third Party providers that support the Group’s services. This component of resilience has become increasingly important over the years, as regulators are emphasising the need for firms to have robust controls and governance in place to protect their services.
The role-holder is responsible for supporting to set and maintain Third Party Resilience requirements within the Group’s Resilience Standards as well as ensuring Third-Party Resilience deliverables are managed across the Bank. This includes the provision of leadership over the operational delivery, controls, reporting, and governance of the Third Party Resilience agenda.
The role-holder will work closely with key stakeholders across TPRM, SCM, Legal, Business and all Resilience Processes, including the Operational Resilience programme to ensure effective delivery of Third Party Resilience activities.
Key Responsibilities
Strategy
• Manage the delivery of processes, controls and governance of Third Party Resilience, and ensure alignment with the Bank’s global strategic direction and with regulatory requirements.
• Support digitisation and transformation activities to drive the Third-Party Resilience of the Bank, including but not limited to tooling, processes, and continuity management.
• Influence Resilience by Design principles across all Third Party initiatives, including with stakeholders from Business and functions.
• Act as Subject Matter Expert on the governance of Third Party Resilience deliverables to influence and improve business understanding of Resilience requirements related to Third Party regulations.
Business
• Act as Subject Matter Expert on Third Party Resilience deliverables pertaining to Operational and Technology Resilience
• Perform Operational and Technology Resilience assessments, resilient design, important business service, data resilience and testing activities. Ensuring IT Service Continuity Management principles, process, procedures, and best practices are followed
• Complete Ongoing Assessment & Governance of resilience & recovery capabilities driving availability objectives against Business expectations. Support the development of ongoing Resilience Test & Exercise Programme and Govern the performance and ensure results are assessed, appropriate actions raised and actions managed to conclusion
• Responsible for the continuity planning for in-scope services required to facilitate business continuity and pandemic plans. Ensuring the alignment/governance of the Resilience agenda within Operational and Technology Services and the Group
• Support Lead, Third Party Resilience to ensure pillars of Operational & Technology Resilience Operations comply with Bank’s Standard. Closely work and align with respective Group Process Owner/deputy in delivering good governance.
• Support Operational and Tech Resilience governance related matters, includes the improvement of Technology Third Party Contingency Plan (TPCP) template
• Support the Risk and Control pillar in driving / delivering the in-scope metrics, control testing, reporting and regulatory requirement from operational perspective
• Support in delivering and improving the framework to understand of Third Party dependencies across the Bank’s IBS, together with sound validation practices
Processes
• Provide SME inputs to standardise Third-Party resilience processes across all Resilience Processes as well as across all Third-Party types (vendors, non-vendors and IGAs). Support standardisation of Third-Party Resilience procedures across all disciplines – Ops Res, BCM, CM, OCIR and Technology & Digital Resilience.
• Provide escalation point on Third Party Resilience matters for stakeholders across Resilience, 2LOD, Business and Functions.
• Engage with Resilience Process Owners to understand and align on Group requirements, and monitor any remediation activities as required.
People & Talent
• Deliver appropriate culture in line with the Bank’s values. Set appropriate expectations from supporting team members.
• Promote new thinking, creative solutions to ensure timely and effective delivery of the programme milestones including management of financial and operational risks.
• Promote lean start-up product development mindset and behaviours at scale.
• Be a self-starter who can initiate and successfully drive programmes and projects to completion with little management supervision.
• Facilitate on-the-job learning from current & previous experience by identifying and communicating transferable lessons, helping to embed these lessons, and encouraging best practice across geographies team.
Risk Management
• Monitor, review and challenge the performance of Third Party Resilience controls within Group Resilience Processes, including review and challenge of 1LOD implementation of processes and controls.
• Support design and implement new controls and metrics as required, including training to Resilience Risk and governance team for execution.
• Review and challenge Risks, Issues, Country Addenda (CA) and Dispensations raised by business and country teams.
• Oversee and challenge Third Party Resilience related issues and actions in M7 and engage with OTCR 2LOD relating to any resulting risk exposure.
• Partner with Legal to ensure all the required clauses are inserted in relevant contracts.
• Support Audit / Regulatory Inspection as required.
Governance
• Work with relevant parties to ensure Resilience controls and metrics are completely reported to the appropriate risk forum to enable the effective management of Resilience risks.
• Participate and support Group Resilience to provide Third Party Resilience updates at risk and governance forums, to provide updates and influence positive outcomes:
o Group Third-Party Risk Management Committee
o IGA Programme Operational Forum
o Resilience Governance & Oversight Forum
o Operational Resilience Working Group
o Operational Resilience programme steering committee
Regulatory & Business Conduct
• Support implementation of Group regulations relating to Third Party Resilience Parties and drive regulatory compliance and conduct gap analysis for country specific regulations.
• Awareness and understanding of the PRA regulatory framework in which the Group operates, and the regulatory requirements pertaining to Third Party Resilience under PRA SS1/21 and PRA SS2/21.
• Awareness and understanding of key regulation from local markets e.g. MAS, HKMA, BaFin and the applicability of these regulations across Third Party Resilience procedures.
• Support Group Resilience, Resilience Geographies, SCM and TPRM with key regulatory submissions.
• Display exemplary conduct and live by the Group’s Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.
Key stakeholders
• Global Head, Group Resilience
• Process Owners, Group Resilience
• Regional and Cluster Heads, Resilience Geographies
• Group Resilience Transformation Programme
• Continuity Management SMEs
• OCIR SMEs
• Technology & Digital Resilience SMEs
• CIB and WRB Governance and Business Resilience Teams
• TPRM (Group and Country)
• SCM Group, Risk and Governance
• SCM Tooling and Product Owner Teams
• TTO Vendor Management
• TTO DDO
• Climate Risk
• Legal (Group and Country)
• FFG Programme
• SC Ventures
• Operational, Technology and Cyber Risk (OTCR) Coverage and SME teams
• Group Internal Audit
Other Responsibilities
Embed Here for good and Group’s brand and values in TTO COO; Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures; Support any change management initiatives which impact on Third-Party Resilience though the provision of advice and guidance as well as ensuring an effective control environment is maintained.
Qualifications
• EDUCATION: Bachelor’s degree or above in Management, Finance or similar
• TRAINING: 3-5 years working experience covering operational / technology / business resilience in financial institutions
• LANGUAGES: Fluent written and spoken English
Skills and Experience
• Third Party Resilience
• Business Resilience
• Technology Resilience
• Operational Resilience
• Risk Management & Governance
• Strategy & Planning
• Project Management
• Financial Services Industry
