Talent.com
This job offer is not available in your country.
Senior ICS Risk, Threat and Governance Manager

Senior ICS Risk, Threat and Governance Manager

Standard CharteredKuala Lumpur, Malaysia
27 days ago
Job description

Job Summary Strategy

  • Awareness and understanding of WRB and Markets ICS team’s strategy in supporting (1) WRB business strategy and (2) Group ICS strategy; towards management and oversight of WRB ICS risk.
  • Identify changes to plan required in terms of additional components, reprioritisation to anticipate and respond to changes
  • Learn from the recent regional and global cyber events and build into strategy towards management of WRB and Markets ICS risk, in order to address current and emerging risks (factoring into TSRA).
  • Assist with other cyber activities underway.

Business

  • Dynamic management of WRB ICS risk in alignment with WRB business strategy and Group ICS strategy.
  • Maintain strong stakeholder engagement with WRB COO team, WRB Business Risk Management (BRM) team, WRB CIO and WRB OTCR teams, to jointly deliver value for WRB.
  • Proactive and effective communication of WRB and markets ICS risk to Business and Group ICS stakeholders (e.g. communication to WRBRC, Stakeholder communication, Governance day, Performance wall)
  • Processes

  • Responsible for governance and management of WRB ICS Risk, along with WRB and Markets, ICS Risk, Threat and Governance team.
  • Escalate appropriately to ensure the Head of ICS Risk – Threat, Risk and Governance, WRB & Markets is briefed and necessary decisions are made in a timely manner.
  • Risk Management

  • Provide oversight on the Threat Security Risk Assessment (TSRA), Continuous Control and Risk Monitoring and Risk and Control Self Assessment for all WRB & Markets domains / risk profiles, including leading and managing any required changes.
  • Identification and Management of WRB & Markets ICS Risks and Threats and leading the drafting and coordination of Treatment Plans and Actions arising from risk events, in collaboration with the business and technology teams. This include : Establishing a Book of Work of activities required to support the Business risk reduction timelines, Interface with other areas to ensure dependencies are known and prioritised, and actions addressing horizon risk items.
  • Manage risk associated to resiliency with focus on Important Business Services (IBS) and its impact on ICS risk (e.g. Response and recover related discussions, assist with cyber crisis management exercises, playbooks etc.)
  • Support the Third Party (TP) risk identification and oversight (of material focus TP) in view of prioritisation and focus from the business and OTCR.
  • Key Responsibilities

    Governance

  • Governance and Oversight on WRB Board Risk Metrics and remediation plans.
  • Governance and Oversight of WRB ICS risk and treatment actions by providing regular status updates including progress, top risks and issues to the respective business forums for the relevant domains. Track RAG status, key milestones, risks, dependencies and issues.
  • Governance and Oversight of Third Party Security Assessment findings and its associated reporting, risk papers and exception requests.
  • Regulatory & Business Conduct

  • Display exemplary conduct and live by the Group's Values, Valued Behaviours, and Code of Conduct
  • Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across the Bank.
  • Effectively and collaboratively identify, escalate, mitigate, and resolve risk, conduct and compliance matters.
  • Key stakeholders

  • Business Risk Management, WRB & Markets
  • Group Information and Cyber Security teams
  • WRB Chief Information Security Officer and teams
  • WRB Chief Information Officer and teams
  • WRB Operational, Technology & Cyber Risk teams
  • Skills and Experience Understanding of the Cyber landscape and ICS Controls within the banking environment Excellent organisation skills with ability to manage multiple deadlines and effectively prioritise Ability to foster positive relationships with internal and external stakeholders at appropriate level ensuring open cooperative environment. Be a Team player. Experienced in the production of executive reporting; good communication skills (written and oral). Excellent analytical and problem-solving skills, with the ability to prioritize and manage multiple tasks in a fast-paced environment Strong communication and interpersonal skills, with the ability to effectively communicate complex security concepts to non-technical stakeholders

    Qualifications EDUCATION

    Bachelor’s Degree in engineering, Computer Science / Information Security or Technology, or its equivalent. TRAINING

    At least 8 to 10 years experience in risk and governance of key ICS Controls – Data Protection, Vulnerability and Compliance Management, Network security, Security Incident Management, etc

    Experience in the identification and assessment of Cyber Risks

    Experience in third party oversight and risk management

    Experience working across multiple security frameworks (e.g. NIST, ISO 27001, PCI-DSS) and understanding of various regulatory requirements globally.

    Experience within security or risk function, ideally gained in the financial industry

    Good organisation and stakeholder management skills with ability to manage multiple deadlines and effectively prioritise

    Ability to work collaboratively with stakeholders and execute independently to effect change across the business lines and manage multiple deliverables simultaneously

    Proven ability to deliver complex, global, pan-bank initiatives by driving collaboration and participation across diverse set of stakeholders

    Stakeholder management, Negotiation skills, Conflict management, Decision-making and Team work CERTIFICATIONS

    Possess one or more security certifications such as CISSP, CISA, CISM, CRISC, PCI-QSA, CSX etc. LANGUAGES

    English

    About Standard Chartered We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

    Our purpose , to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

    Together we : Do the right thing

    and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do

    Never settle,

    continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well

    Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

    What we offer In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

    Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.

    Time-off

    including annual leave, parental / maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.

    Flexible working

    options based around home and office locations, with flexible working patterns.

    Proactive wellbeing support

    through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills,global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits

    A continuous learning culture

    to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.

    Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

    #J-18808-Ljbffr

    Create a job alert for this search

    Governance Risk And • Kuala Lumpur, Malaysia

    Related jobs
    • Promoted
    Associate Director Risk Assessment Monitoring and Insight, Risk

    Associate Director Risk Assessment Monitoring and Insight, Risk

    Standard CharteredKuala Lumpur, Malaysia
    Job Summary This role reflects our commitment to more than just profitability—it's about living our values and upholding our brand promise, Here for Good. The Managed Services team, established to s...Show moreLast updated: 30+ days ago
    • Promoted
    Cybersecurity Risk Manager - Third Party Security

    Cybersecurity Risk Manager - Third Party Security

    Standard CharteredKuala Lumpur, Malaysia
    Title : Cybersecurity Risk Manager - Third Party Security.Technology Regular Employee Office - Full Time 18 Sept 2025 Job Summary. As a Cyber Security Analyst, you’ll be at the forefront of protectin...Show moreLast updated: 6 days ago
    • Promoted
    Governance Risk & Compliance Lead

    Governance Risk & Compliance Lead

    bpKuala Lumpur, Kuala Lumpur, Malaysia
    Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia.Governance Risk & Compliance Lead.Job Description : Our purpose is to deliver energy to the world, today and tomorrow.For over 100 years, bp...Show moreLast updated: 1 day ago
    • Promoted
    Manager, High Risk Client Management

    Manager, High Risk Client Management

    RBCKuala Lumpur, Kuala Lumpur, Malaysia
    Developing and implementing strategies for all activities relating to one or more business units regarding business conduct and ethical relationship standards. Providing advice and interpretation of...Show moreLast updated: 25 days ago
    • Promoted
    Cybersecurity Risk Manager

    Cybersecurity Risk Manager

    Standard CharteredKuala Lumpur, Kuala Lumpur, Malaysia
    We are looking for a passionate Third-Party Cybersecurity Risk Assessor to join our dynamic cybersecurity team! In this critical role, you will assess and manage the cybersecurity risks posed by th...Show moreLast updated: 1 day ago
    • Promoted
    AVP, Enterprise and Project Risk Management

    AVP, Enterprise and Project Risk Management

    Takaful IKHLASPetaling Jaya, Malaysia
    AVP, Enterprise and Project Risk Management This role adds value to strategic and operational decisions by assessing and identifying risks that could impact the success of the TIGB.Focus is on eval...Show moreLast updated: 26 days ago
    • Promoted
    Senior Manager - Cyber Security Risk Management

    Senior Manager - Cyber Security Risk Management

    Standard CharteredKuala Lumpur, Kuala Lumpur, Malaysia
    The Cyber Security Assessment (CSA) is an integral part of ICS Protect with an aligned goal to protect the Bank from information security threats by delivering effective information security servic...Show moreLast updated: 30+ days ago
    • Promoted
    Director Business Risk Assessment & Advisory

    Director Business Risk Assessment & Advisory

    Standard CharteredKuala Lumpur, Kuala Lumpur, Malaysia
    To us, good performance is about much more than turning a profit.It's about showing how you embody our valued behaviours as well as our brand promise, Here for good. We're committed to promoting equ...Show moreLast updated: 20 days ago
    • Promoted
    Manager, Risk Management and Compliance

    Manager, Risk Management and Compliance

    ReneucoKuala Lumpur, Kuala Lumpur, Malaysia
    Lead in the implementation of risk management activities (risk facilitation and other advisory services) to ensure the business units (division and subsidiaries) perform their risks management acti...Show moreLast updated: 30+ days ago
    • Promoted
    Senior ICS Risk, Threat and Governance Manager

    Senior ICS Risk, Threat and Governance Manager

    Standard CharteredKuala Lumpur, Kuala Lumpur, Malaysia
    Awareness and understanding of WRB and Markets ICS team’s strategy in supporting (1) WRB business strategy and (2) Group ICS strategy. towards management and oversight of WRB ICS risk.Identify chan...Show moreLast updated: 30+ days ago
    • Promoted
    Governance, Risk Management & Compliance

    Governance, Risk Management & Compliance

    Standard CharteredPuchong, Selangor, Malaysia
    Area of interest : Governance, Risk Management & Compliance.This role could be based in Malaysia and India.When you start the application process you will be presented with a drop down menu showing ...Show moreLast updated: 1 day ago
    • Promoted
    An'yst, Risk Advisory

    An'yst, Risk Advisory

    Standard CharteredKuala Lumpur, Kuala Lumpur, Malaysia
    The role is responsible for supporting the Technology and Operations (T&O) division in managing First Line of Defence (1LOD) risk activities across Chief Information Officer (CIO) functions.This in...Show moreLast updated: 1 day ago
    • Promoted
    Senior Risk Manager, Third Party Security Risk (Malaysia, India)

    Senior Risk Manager, Third Party Security Risk (Malaysia, India)

    Standard CharteredPutrajaya, Putrajaya, Malaysia
    Cybersecurity Risk Manager ( Malaysia, India).This role could be based in Malaysia and India.When you start the application process you will be presented with a drop down menu showing all countries...Show moreLast updated: 1 day ago
    Global Governance, Risk & Compliance Manager

    Global Governance, Risk & Compliance Manager

    PeopleLake GroupKuala Lumpur, Kuala Lumpur, MY
    A global technology leader providing IT Solutions such as Geoscience Software & Data Analytics Services, High-Performance Computing as a Service as well as IT Security – dealing with data sovereign...Show moreLast updated: 3 days ago
    • Promoted
    E&C Risk Governance Lead

    E&C Risk Governance Lead

    Oman ShellCyberjaya, Selangor, Malaysia
    E&C Risk Governance Lead page is loaded## E&C Risk Governance Leadlocations : Cyberjaya-Wisma Shelltime type : Full timeposted on : Posted Todayjob requisition id : R Selangor, Malaysia • •Job Fa...Show moreLast updated: 5 days ago
    • Promoted
    Cybersecurity Risk Manager ( Malaysia, India)

    Cybersecurity Risk Manager ( Malaysia, India)

    Standard CharteredKuala Lumpur, Kuala Lumpur, Malaysia
    This role could be based in Malaysia and India.When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country wher...Show moreLast updated: 1 day ago
    • Promoted
    CIB, CFCR, Compliance Risk Governance

    CIB, CFCR, Compliance Risk Governance

    Standard CharteredKuala Lumpur, Malaysia
    The role sits within the Compliance, Financial Crime (CFCR), and Conduct Risk team.Specifically supporting the Corporate & Investment Banking businesses. The team is part of the global advisory team...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Project Manager – Financial Services (Risk & Compliance)

    Senior Project Manager – Financial Services (Risk & Compliance)

    Manpower MalaysiaKuala Lumpur, Malaysia
    Months (Renewable based on performance) Working Hours : .Normal Business Hours Direct message the job poster from Manpower Malaysia Interested candidates, please send your updated resume to : Responsi...Show moreLast updated: 1 day ago
    • Promoted
    Senior Associate - Risk Performance, Governance and Controls (RPGC)

    Senior Associate - Risk Performance, Governance and Controls (RPGC)

    PwCKuala Lumpur, Kuala Lumpur, Malaysia
    A career within Assurance Support Services, will provide the opportunity to support our engagement teams and clients by providing advice and counsel on accounting, financial reporting, and strategi...Show moreLast updated: 1 day ago
    • Promoted
    Senior Manager - Cybersecurity

    Senior Manager - Cybersecurity

    HartalegaPetaling Jaya, Selangor, Malaysia
    The Head of Cyber Security is a strategic leadership role responsible for safeguarding the organization's digital assets, IT infrastructure, and sensitive data across both corporate IT and operatio...Show moreLast updated: 30+ days ago