Job Details

Director, CIB Third Party Risk - Controls, Assurance & Transformation
Job Description
Requisition Number:  65186
Job Location:  Bukit Jalil KL, MYS
Global Grade:  Band 5
Work Type:  Office Working
Employment Type:  Permanent
Posting Start Date:  05/11/2026
Posting End Date:  19/11/2026
Job Description: 

Job summary

This is a senior first-line risk role within CIB COO Control Office, reporting to the Head, CIB Third Party Risk Management (TPRM). The role is responsible for representing CIB in the design, implementation and assurance of the target-state TPRM framework and ensuring that associated processes, controls and operating arrangements provide an effective and sustainable first-line control environment.

The role will lead CIB oversight and challenge of control design decisions, business readiness, thematic assurance, regulatory and audit read-across, control exceptions and transformation dependencies. It will work across CIB businesses, Operations, Technology, Supply Chain Management, Group TPRM, specialist Risk Domains and Second Line to identify control weaknesses, clarify accountabilities and drive sustainable remediation.

The successful candidate will combine strong TPRM and non-financial risk knowledge with controls, assurance and transformation experience. The role requires the ability to assess end-to-end control effectiveness, translate regulatory and risk requirements into practical outcomes, influence senior stakeholders and manage complex change dependencies.

Key Responsibilities

Strategy
•    Shape and deliver the CIB TPRM controls, transformation and assurance strategy, aligned to the Group TPRM framework, CIB risk priorities and target-state operating model.
•    Represent and influence CIB requirements and risk considerations in the design and implementation of OneTPRM, the target-state control framework and related process and operating model changes.
•    Drive a prevention led approach to TPRM by identifying structural weaknesses and addressing root causes.
•    Identify opportunities to simplify, standardise and automate controls while ensuring changes remain risk-based, sustainable and aligned to regulatory and policy requirements.
•    Assess the impact of regulatory, technology and operating model developments on the CIB TPRM control environment and determine the changes required to controls, processes or assurance.

Processes
•    Provide CIB oversight and challenge of the end-to-end design and implementation of TPRM processes and controls across vendor, non-vendor and intragroup arrangements.
•    Lead the mapping of target-state TPRM controls into relevant CIB processes, identifying control gaps, overlaps, unclear accountabilities and execution dependencies, and drive resolution with the responsible owners.
•    Lead CIB readiness for OneTPRM and other material TPRM changes, assessing business requirements, process impacts, implementation dependencies, migration risks, interim arrangements and post-implementation issues.
•    Establish a structured thematic assurance programme focused on areas of heightened risk or control concern, including the effectiveness of continuity and exit plans, resilience assurance, onboarding, ongoing monitoring, service performance and control exceptions.
•    Coordinate CIB regulatory, audit and Second Line read across, assessing whether findings indicate broader weaknesses across businesses, countries, third-party populations or processes.
•    Maintain clear interfaces with Group TPRM, SCM, Risk Assessment and Arrangement Utilities, Centres of Excellence, specialist Risk Domains and Business TPRM Leads.
•    Define requirements for control monitoring and management information to identify control deterioration, recurring exceptions and areas requiring management attention.

People & Talent
•    Provide functional leadership and subject-matter expertise across the CIB TPRM community on controls, assurance and transformation.
•    Build capability through guidance, coaching and quality challenge for colleagues supporting control assessment, testing, assurance, transformation and remediation.
•    Promote a culture of constructive challenge, clear accountability and evidence-based risk management, encouraging early identification and escalation of control weaknesses.
•    Bring together business, risk, technology, operations and transformation stakeholders to resolve cross-functional issues.
•    Prioritise activity according to risk, regulatory commitments and transformation dependencies, escalating capacity or delivery constraints that could affect control effectiveness.

Risk Management
•    Challenge proposed TPRM processes and controls to determine whether they are proportionate to risk, operationally sustainable and capable of addressing the underlying risk.
•    Assess the design and implementation effectiveness of the CIB TPRM control environment, identifying material weaknesses, dependencies, manual workarounds and residual risks.
•    Oversee material control exceptions and transformation risks, ensuring appropriate treatment, ownership, evidence, target dates and escalation.
•    Challenge remediation arising from control testing, assurance, regulatory reviews, audit findings and risk events to ensure actions address root causes and deliver sustainable outcomes.
•    Assess risks arising from OneTPRM releases and other material process, data, technology or operating-model changes, including readiness, interim controls and post-implementation performance.
•    Identify risks arising from fragmented or unclear ownership.
•    Support risk acceptance and escalation decisions where control weaknesses, target-state limitations or remediation timelines create material residual risk.
•    Ensure significant issues and recurring control failures are reflected in the relevant RCSA, issue-management, risk treatment or risk acceptance process.

Governance
•    Provide clear, decision oriented updates on control effectiveness, assurance findings, transformation delivery and implementation risk to relevant CIB and Group governance forums.
•    Ensure governance materials clearly articulate the issue, root cause, business impact, residual risk, dependencies, accountable owner, remediation plan and management decision required.
•    Maintain effective governance of material control changes, assurance findings, regulatory and audit read-across, OneTPRM dependencies, transformation risks, exceptions and overdue remediation.
•    Escalate where delivery delays, design limitations or unresolved dependencies create material risk to CIB.
•    Track material governance decisions and actions to sustainable closure, ensuring sufficient evidence supports closure.
•    Support the Head, CIB TPRM in providing senior management with an integrated view of control-framework maturity, transformation delivery risk, systemic weaknesses and material assurance findings.

Regulatory & Business Conduct
•    Display exemplary conduct and live by the Group’s Values and Code of Conduct. 
•    Take personal responsibility for embedding the highest standards of ethics, regulatory compliance and business conduct across Standard Chartered Bank. 
•    Support the CIB TPRM team in achieving the outcomes set out in the Bank’s Conduct Principles: Fair Outcomes for Clients; Effective Financial Markets; Financial Crime Compliance; and The Right Environment. 
•    Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

Role-Specific Candidate Profile 
•    Strong judgement and the ability to determine whether process and control designs address the underlying risk and can operate sustainably in practice.
•    Demonstrated experience designing, implementing, assessing or assuring first-line controls in a complex financial-services environment.
•    Experience of significant transformation, target operating models, technology-enabled process change, business readiness and post-implementation risk management.
•    Ability to translate regulatory, policy, audit and risk requirements into clear control outcomes, implementation requirements and accountable actions.
•    Practical understanding of third-party risk across vendor, non-vendor and intra-group arrangements, including due diligence, ongoing monitoring, resilience, exit and remediation.
•    Ability to challenge senior stakeholders constructively and resolve unclear or overlapping accountabilities across a matrix organisation.
•    Excellent written and verbal communication, organisation, prioritisation and governance skills.

The Ideal Candidate:

•    Bachelor’s degree or equivalent
•    Min 10-12 years of relevant experience
•    Strong financial services experience in TPRM, Risk, Controls or Assurance. 
•    Solid Third-Party Risk Management and operational/non-financial risk knowledge.
•    Experience in control design, testing, assurance and remediation. 
•    Exposure to large-scale transformation, process or technology change. 
•    Strong regulatory, audit and operational resilience understanding. 
•    Excellent senior stakeholder management and influencing skills. 
•    Strong communication skills.
•    Relevant certifications such as IRM, CISA, CRISC or CIA are advantageous.

About Standard Chartered

We're a global bank connecting clients to our differentiated network, offering growth opportunities in the world's most dynamic markets. Our strategy, which combines cross-border capabilities and leading wealth management expertise, helps us deliver our purpose - to drive commerce and prosperity through our unique diversity.

Over our 170-year history, and across a unique geographical footprint connecting Asia, Africa and the Middle East to each other and the world, we've built a bank like no other, with diverse capabilities and partnerships that set us apart.

What We Offer

  • Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions, and geographies.
  • In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
  • Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
  • Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
  • Flexible working options based around home and office locations, with flexible working patterns.
  • Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global employee assistance programme, sick leave, mental health first-aiders and self-help toolkits.
  • A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual, and digital learning.

Visit our careers website to learn more about us: www.sc.com/careers.

Information at a Glance