Senior Risk Manager, Third Party Security Risk (Poland, India or Malaysia)

at  Standard Chartered

JOB SUMMARY

The Group Chief Information Security Officer (CISO) organisation is instrumental in protecting and ensuring the resilience of Standard Chartered Bank’s data and IT systems by managing information and cyber security (ICS) risk across the enterprise.
The Office of the CISO is central to ensuring the Bank’s ability to meet its ICS commitments to internal and external stakeholders, including regulators, as well as maintaining an acceptable ICS risk profile that is regularly reported to the Board.
To support the TPSR Third Party Risk Remediation agenda this role has been created to provide the right support to the team in remediation space (risk maintenance and closure).

SKILLS AND EXPERIENCE

• Bachelor degree or above from an accredited college/university in an appropriate field.
• Ideally 3-5 years of experience in information security / IT auditing, with Big 4 and/or Banking & Financial services experience.
• Experience in third party audits/assessments is a plus, but understanding of auditing standards, compliance, risk assessment and internal control frameworks is a requirement.
• Excellent written and verbal communication skills.
• Strong time management skills.
• Strong stakeholder engagement skills, and ability to interact at all levels across an organisation, and external stakeholders.
• Ability to multitask and ensure that all key priorities are delivered as per agreed timelines.
• Expertise in Third party risk assessment.
• Strong communication skills in English.
• Knowledge of security frameworks (e.g. COBIT, ISF, COSO), standards (e.g. ISO, NIST, CIS), information security principles, security architecture and regulatory requirements will be a plus.
• Competency with Microsoft Office Suite (Word, PowerPoint, Excel, Visio, SharePoint).
• Certifications (CISSP, CISA, CRISC, CCSP) will be a plus.

• Serves as the first line of Defence for assuring ICS controls are implemented effectively on Third party side.
• Delivering the third party security risk program within the Bank within Remediation space, this includes risk maintenance, closure, reporting and self-assessment process.
• Effectively support business in Remediation process by timely and quality closure of Observations raised during Third Party Security Assessments, addressing relevant risks. Portfolio includes All Businesses and Functions.
• Make timely and sound judgments, and identify clear solutions from broad, complex or ambiguous situations.
• Interact with all levels of management within the Bank while performing third party security reviews/observation closure of service providers across all of the Bank’s markets.
• Effectively communicate the security risks to internal and external stakeholders.
• Effectively communicate and manage relationships with stakeholders globally.