Job Summary

•    Standard Chartered’s diverse footprint across 63 of the fastest growing markets in Asia, Africa and the Middle East creates unique opportunities for passionate, motivated, and highly skilled people who want to make a difference. We are changing the way people think about banking. We are changing the way we do business – becoming the digital bank with a human touch. This is your opportunity to be part of a growth story in an industry that is reimagining how customers are getting better, faster experiences and convenience through digital technology.
•    Our Information & Cyber Security (ICS) team sits within the Transformation, Technology & Operations (TTO) function and is responsible for all mission-critical and enterprise-wide areas of cybersecurity, including identity and access management, global threat intelligence, data protection, malware protection, and application and infrastructure security. These are challenges that impact our clients globally. 
•    Our ICS Portfolio team develops the platforms, drives the processes and builds partnerships on behalf of ICS. We thrive on providing solutions to complex issues, devoting time and energy to designing and delivering new and innovative solutions, and all in an environment that demands being risk-aware, not risk-averse. ICS chooses progress over perfection and aims to always participate with a constructive purpose. The team makes an impact wherever they are based, be it in our offices around the world, our Global Business Solution centres in China, India, Malaysia and Poland, or even from our home.
•    If tackling complex challenges excites you, then join our ICS Identity & Access Management team where you will get to collaborate and work on solutions across business and functions to drive the transformation and deliver better experiences to our customers. We constantly strive to reduce time-to-market and streamline our processes. We follow agile methodology and work to embed an improvement habit across the bank. 
•    Now you have an opportunity to make a meaningful impact with a diverse and passionate team of creators, innovators, and achievers. With us, you’ll learn, be inspired, and make an impact every day. The success of our work hinges on how we use the unique diversity of our people to realise the effects we seek to achieve: Always on. Always safe. Always Simple.

Key Responsibilities

•    The Authorisation Security Team within the Identity and Access Management domain operates as an integrated model consisting of four independent yet interconnected capabilities that together form a closed-loop control system. Authorisation Policy Engineering is a newly established capability responsible for converting business, risk, and regulatory access intent into durable, enforceable, and machine readable identity and access control policies.
•    The Lead, IAM Authorisation Policy Engineering role sits within the ICS Identity & Access Management function and is responsible for defining, engineering and governing enterprise wide authorisation policy. The role ensures that access intent is unambiguous, consistent and machine readable, enabling reliable enforcement across identity lifecycle, privileged access and downstream control systems.
•    This role treats authorisation policy as an engineering discipline, ensuring that business, regulatory and risk intents are translated into precise, executable policy artefacts that can be consumed consistently across the Bank.
•    Build and maintain executable, machine‑readable policy artefacts across the policy lifecycle (author, test, version, release, rollback), aligned to the standards and semantics defined.
•    Implement and maintain policy models (roles, attributes, conditions, constraints) as defined and propose improvements based on implementation feedback and defects.
•    Apply and operationalise policy standards; create reusable templates/patterns to ensure consistent implementation.
•    Convert requirements into testable policy artefacts with traceability to source intent, under Head review for semantic correctness.
•    Design, build and maintain policy‑as‑code artefacts, including version control, automated tests, peer review and controlled change.
•    Implement deterministic test coverage and validation checks; detect and remediate non‑determinism, ambiguity and unsafe outcomes before release.
•    Operate as a senior individual contributor; mentor and uplift practice through peer review and shared patterns.
•    Provide technical guidance on policy implementation; escalate semantic disputes to the Head as the final authority.
•    Partner with Identity Lifecycle, Zero Standing Privilege and Trust Engineering to ensure policies are consumable, testable and implemented consistently.
•    Protect policy integrity against tool constraints and legacy shortcuts by raising risks early and proposing safe alternatives.

Strategy
•    Implement and continuously improve enterprise authorisation policy standards aligned to Zero Trust principles.
•    Operationalise policy-as-code practices in tooling and working methods.
•    Implement validation and traceability that demonstrates consistency.
•    Support the Bank’s broader IAM transformation by reducing ambiguity and control debt at source.
•    Continuously simplify and strengthen policy models through disciplined engineering practices.
•    Partner with the Bank Cyber Operations to design, develop and operationalise identity policy. 
•    Partner with the Bank Security Architects and Risk Teams to ensure alignment with Enterprise Security approach and Regulatory standards.
•    Partner with the Bank Analytics and Strategy teams to translate insights into execution roadmaps.
•    Continuously identify opportunities for cost optimization, increase efficiency and process simplification.
Business
•    Act as a trusted technical adviser on enterprise access policy for business, technology, risk and audit stakeholders. 
•    Provide clear, defensible explanations of access intent and policy decisions. 
•    Enable scalable, consistent access control across regions, platforms and identity types. 
•    Reduce regulatory and audit risk caused by inconsistent or ambiguous policy interpretation. 
•    Ensure policy supports secure growth and innovation across the Bank’s global footprint.
•    Partner with business owners to validate outcomes and benefits realization.
•    Work closely with ICS and Stakeholders to ensure that requirements are in line with the bank’s strategy
•    Responsible to evolve the craft towards improving automation, simplification and innovative use of latest market trends
•    Engage with third-party vendors as appropriate for the project

Processes
•    Define and operate end‑to‑end policy lifecycle processes, including design, review, testing, approval, release and rollback.
•    Establish quality controls, semantic validation and change‑impact assessment for policy changes.
•    Maintain traceability between policy intent, policy artefacts and consuming systems.
•    Ensure policy artefacts are auditable, reproducible and resilient.
•    Identify opportunities for automation, simplification and standardisation.
•    Partner with process owners, operations, and compliance teams to ensure business alignment.
•    Successful grooming of delivery backlog facilitating planning ceremonies with clear, aligned outcomes.
People & Talent
•    Act as the primary liaison between business, cybersecurity, and platform teams.
•    Communicate product performance, risks, and roadmap to executive stakeholders and governance forums.
•    Foster culture of precision, accountability, and shared understanding of authorisation concepts.
•    Build capability through coaching, mentoring, and shared practices.
•    Contribute to hiring, retention, and professional development.
•    Drive stakeholder alignment on adoption plans, investment needs, and decommissioning of legacy platforms.
•    Create an environment of trust, open communication, and cross-functional alignment across business, technology, and control functions.
•    Collaborate closely with business units, Scrum Masters, and development teams to ensure successful sprint outcomes.
•    Champion an engineering‑first culture that prioritises precision, correctness, and policy integrity over delivery speed.

Risk Management
•    Identify and mitigate risks related to access semantics, ambiguity and policy misinterpretation.
•    Ensure policy behaviour is predictable under normal and degraded conditions.
•    Maintain evidence‑based artefacts to support audit, risk and regulatory reviews.
•    Escalate systemic risks that threaten policy integrity or control effectiveness.
•    Establish and maintain a strong governance framework for correctness, consistency, resilience and enforceability.
•    Proactively identify, assess, and eliminate systemic risks such as semantic drift, logic collisions, inconsistent attributes, and misaligned enforcement patterns.
•    Ensure fail-safe behaviour under degradation or failure.
•    Contribute to audit and risk management with evidence-based artefacts.
•    Ensure adherence to ICS governance standards and contribute to shaping internal audit and risk processes.
•    Ensures the project follows the standards with respect to risk management as applicable to their domain.
•    Adheres to common practices to mitigate risk in their respective domain.
Governance
•    Embed governance, compliance and regulatory expectations into policy design and engineering.
•    Ensure policy decisions are explicit, traceable and defensible.
•    Maintain a single, authoritative source of truth for enterprise authorisation policy.
•    Act as a role model for integrity, ethical behaviour and responsible delivery.
•    Ensure all artefacts and assurance deliverables are as per the required standards and policies (e.g., SCB Governance Standards, ESDLC etc.).

Regulatory & Business Conduct
•    Display exemplary conduct and live by the Group’s Values and Code of Conduct. 
•    Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
•    Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.
Key stakeholders
•    See the consolidated list of responsibilities below
•    Peers in IAM Authorisation Security, Hive Tech Lead, PMs and SMs ICS wide, Engineering Leads & Enterprise Security Architecture
•    ICS IAM Leadership Team, ICS CISOs, ICS Delivery Team partners, CPOs
•    Technology & Architecture & CIOs
•    Global Head, ICS Identity & Access Management
•    Global Head, Cyber Security Technology
•    Global Head, Cyber Security Operations
•    Global Technology Service Heads (Production Support, Infrastructure, Testing, SRE, Architecture)

Other Responsibilities
•    Embed Here for good and Group’s brand and values in ICS - Identity & Access Management domain. Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures; Multiple functions (double hats); [List all responsibilities associated with the role]
The ideal candidate will embody the following attributes:
•    Strategic Thinker - connects execution with long-term organizational goals.
•    Independent Driver - able to lead without heavy oversight.
•    Regulatory Mindset - embeds compliance and governance discipline in delivery.
•    Trusted Partner - strong communicator with ability to engage stakeholders up to CIO level.
•    Delivery-Oriented - relentless focus on achieving OKRs and outcomes.
•    Collaborative Leader - fosters alignment, removes silos, and builds trust across teams.

Skills and Experience

•     15+ years of total experience as a cyber security professional with at least 8 years demonstrated experience defining and governing enterprise authorisation policy in a global capacity. 
•    experience in translating business, regulatory and risk intent into executable policy. 
•    experience in establishing capabilities with strong engineering standards. 
•    experienced in leading complex, enterprise-wide initiatives with accountability for capability and outcomes. 
•    demonstrated experience in designing or governing machine‑readable authorisation policy (e.g., rbac/abac/pbac, declarative policy languages).
•    familiar with enterprise directories and identity platforms such as active directory, entra and related iam technologies
•    familiar with operating systems, middleware, databases, and cloud platforms (azure/aws) from identity threats perspective
•    familiar with emerging technologies such as artificial intelligences, agentic ai and digital assets from identity threats perspective
•    analytical, delivery-oriented mindset with the ability to balance strategy and execution.
•    exceptional communication (technical and non-technical), collaboration, and leadership skills with a focus on influencing without authority.
•    skilled at identifying risks, driving remediation, and ensuring compliance with audit/regulatory expectations.
•    agile mindset proven by experience with agile tools. 
•    proficient in creating process and solution design documents
•    proficient in stakeholder management and good communication skills. Able to bridge business and technical teams. Able to communicate with senior executives while maintaining alignment with ground-level teams.
•    experience working in banking, finance, or other regulated environments.

Qualifications

•    bachelor’s degree in cyber security, computer science, engineering, banking, business, or a related field
•    certified scrum product owner (cspo)
•    relevant certifications would be beneficial.

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.