Job Summary

This role could be based in Malaysia or India. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based

•    Deliver high-quality, evidence-based testing of key Technology and Resilience controls across regulatory, financial reporting and BAU control testing programmes.
•    Independently assess control design and operating effectiveness, identify control weaknesses, and provide robust, evidence-based testing conclusions.
•    Support effective oversight through timely escalation, clear reporting and appropriate check and challenge with relevant stakeholders.
•    Contribute to strong quality standards across control testing deliverables, including workpapers, reports and management information.
•    Drive continuous improvement in control testing through methodology enhancements and the responsible adoption of AI, automation and data-driven approaches.

Key Responsibilities

Key responsibilities include:
•    Execute a consistent, sustainable and re-performable technical control testing framework/methodology for the bank’s critical IT systems.
•    Perform timely and robust control testing, including evidence assessment, identification of control weaknesses, and clear documentation of testing conclusions.
•    Promote compliance with the Bank’s risk framework and policies (e.g. ERMF and O&T RTF)
•    Support stakeholders in defining appropriate remediation actions to address identified control weaknesses and issues across critical IT systems and associated processes.
•    Track remediation progress, provide effective check and challenge over delivery status, and escalate delays or concerns where appropriate.
•    Identify opportunities to automate and enhance control testing activities.

Strategic
•    Maintain effective relationships with leaders to facilitate:

•    Effective key IT controls testing;
•    The provision of timely, expert advice and assurance; and
•    Partnerships with other functions to provide professional advice and assurance;

Risk Management
•    Adopt an anticipatory approach to risk assessment through stakeholder engagement and monitoring of the external environment.
•    Work with other control assurance teams to drive efficiency, effectiveness and reduce duplication.
•    Provide robust, evidence-based challenge and escalate significant control weaknesses, delivery risks and unresolved matters through the appropriate governance channels.
•    Influence continuous improvement of the IT control environment by identifying recurring weaknesses, providing evidence-based challenge and communicating practical improvement opportunities to the relevant risk and control owners.

Governance 
•    Track and report control testing and other relevant risk assessment outcomes to provide management information, support oversight, and enable timely escalation of identified control weaknesses and issues.
•    Engage with Application/Service Owners of critical IT systems to understand emerging technology risks, assess the adequacy of relevant technical controls, and provide appropriate check and challenge where control weaknesses are identified.

Regulatory & Business Conduct 
•    Display exemplary conduct and demonstrate the group’s values and code of conduct in all control testing activities and stakeholder interactions.
•    Take personal responsibility for upholding high standards of ethics, regulatory conduct, and business conduct in the execution of control testing responsibilities.
•    Support the control testing team in achieving outcomes aligned with the bank’s conduct principles, including the right environment.
•    Identify and appropriately escalate conduct, compliance, and control-related matters arising through testing activities.
•    Provide timely, accurate, and well-supported risk and control information to support regulatory engagements, meetings, and RFIs.

Key Stakeholders
•    Head of Controls Testing
•    Control Testing Domain Leads
•    T&O Risk Management
•    Group Operational Risk
•    Group Internal Audit
•    Application, Service, Process and Control Owners

Motivations

•    Flexible working arrangements that support sustained performance and wellbeing.  
•    Solving complex technology risk and control challenges and continuously improving how testing is performed.  
•    Building deep technology risk and control expertise while influencing meaningful improvements to the Bank’s control environment. 
•    Driven by opportunities to innovate and explore how AI, automation, and data-driven approaches can enhance the quality, consistency and efficiency of control testing.

Skills and Experience

•    IT / Technology Audit
•    Control Testing and Assurance
•    Risk Management
•    Written Communication
•    Critical Thinking

Other Skills
•    Negotiation Skills
•    Building Connections / Collaboration
•    Artificial Intelligence and Automation
•    Nimble Learning

Qualifications

Key Experiences
•    7 to 10 years of experience in IT Audit and/or IT Risk Management
•    Experience in US SOX, UK SOX/UK ACG, FRCF or an equivalent internal-controls-over-financial-reporting regime. 
•    Technical knowledge of IT control best practices across different platforms, systems and security tools
•    Good understanding of security processes, risks and controls, including audit and control testing methodologies

Certifications / Qualifications
•    Tertiary qualifications in Computer Science or other equivalent areas
•    Professional certifications such as CPA, CISA, CRISC, CISM and/or any AI Certifications are advantageous

Languages
•    Proficiency in verbal and written English

About Standard Chartered

We're a global bank connecting clients to our differentiated network, offering growth opportunities in the world's most dynamic markets. Our strategy, which combines cross-border capabilities and leading wealth management expertise, helps us deliver our purpose - to drive commerce and prosperity through our unique diversity.

Over our 170-year history, and across a unique geographical footprint connecting Asia, Africa and the Middle East to each other and the world, we've built a bank like no other, with diverse capabilities and partnerships that set us apart.

What We Offer

• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions, and geographies.
• In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global employee assistance programme, sick leave, mental health first-aiders and self-help toolkits.
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual, and digital learning.

Visit our careers website to learn more about us: www.sc.com/careers.