Standard Chartered Hiring For Senior Information Security Manager, Data Protection at Other India Full Time

About Standard Chartered
We are a leading international bank focused on helping people and companies prosper across Asia, Africa and the Middle East.
To us, good performance is about much more than turning a profit. It’s about showing how you embody our valued behaviours – do the right thing, better together and never settle – as well as our brand promise, Here for good.
We’re committed to promoting equality in the workplace and creating an inclusive and flexible culture – one where everyone can realise their full potential and make a positive contribution to our organisation. This in turn helps us to provide better support to our broad client base.
The Role Responsibilities

• Access Management & Data Protection team is made up of cyber security thought leaders, who are accountable for provisioning Access Management, Data Discovery & Classification, Information Rights Management and Data Leakage Protection services that play key roles in improving Bank&rsquos cyber security posture by preventing, detecting and minimizing the impact of developing cyber threats.
• The teams collaborate and provide complementary services in order to allow efficient management and timely response to information and cyber security incidents, and therefore ensure and support the continuity and growth of Bank&rsquos business operations and meet the both internal and external stakeholders expectations across 70+ countries and territories, in which SCB operates.
• This is a Senior Information Security Manager role in Service Process Governance for Data Protection who will report directly to Lead Service Process Governance, Data Protection. The role should provide very good level domain knowledge in Data Protection and he/she will also be responsible for creating and managing the processes and relevant metrics for Data Protection Domain. In addition, the role is also responsible to ensure the that the processes and operations for Data Protection complies to the relevant ICS policy and standards.

Strategy & Operational Activities

• Support the Lead in ensuring that the book of work year on year is delivered,
• Being a key interface for the DP Service Heads / Service Leads, DP Risk & Control team and our TRP partners, provide necessary support regarding Data Protection Processes and Metric related matters.
• Interact with all levels of management within the Bank while establishing the Data Protection processes. This includes end to end management of creation / reviewing of process including workflow, RACI, review and gap analysis with policy / regulation with R&C, UORM & GPO.
• Understand the key processes and design the right set of control / service performance metric including threshold settings and review against process / policy / standards with Risk & Control
• As a domain process expert, be able to articulate clearly service design issues to both internal and external stakeholders.
• Assist the Lead in ensuring compliance of DP processes against the bank&rsquos ICS IAM Standards by conducting annual process gap analysis and reviewing of existing open EORP risk items to assess the relevancy against the enhanced IAM Standards before making recommendation to Service Team on the required remediation effort.
• Partner with the DP Service Team in the development of new / amended processes, facilitating discussion with relevant stakeholders and finally to perform review against the new/amended process to ensure conformance to the relevant control objectives.
• Challenge the process owner when reviewing operational controls to ensure that all controls are in line to standard requirements.
• Manage a register of Data Protection service issues (through Problem Management JIRA Portal) and ensure those problem records are timely addressed.
• Stay abreast on the industry trends and regulatory requirements related to Data Protection.
• Support any training and awareness initiatives relating to Data Protection processes.
• Seek constant feedback from the stakeholders, implement changes and improvements as needed.
• Work with stakeholders such as AMDP Service Teams, other CSS Service Domains, Technology (CIO / PSS) groups, End User Services, Secure Design Centre, CISO and Risk Teams (CISRO, ISRO, GOR etc) etc. to ensure the continuous improvement of the bank’s Cyber Security capabilities.
• Take part in large to medium projects assigned with in Access Management / Data protection domain.

People and Talent

• Facilitates collaboration between the teams within Access Management & Data Protection
• Continuously builds relationships with different stakeholders within and outside of Access Management & Data Protection to strengthen the team&rsquos brand and eminence
• Highly entrepreneurial with high level of energy, dedication and an unrelenting drive to deliver value with the focus on value form collaboration and learning loop.
• Strong sense of responsibility to deliver upon commitments with confidence in teamwork value.
• Is confident and will roll-up his/her sleeves to help others achieve.
• Able to get things done in a quick-paced environment with changing operational priorities. Be transparent and open around what works and what doesn&rsquot.

Risk Management

• Identify operational risks
• Lead through example and promote the appropriate conduct, culture and values.

Governance

• Provide timely and accurate reporting to appropriate committees.
• Ensure appropriate oversight and facilitate resolution of high impact risk/issues
• Perform analysis on processes and metrics to identify potential service degrades or emerging systematic issues and provide timely reporting against them.
• Jointly ensure that the team&rsquos book of work progress continuously and timely.

Regulatory & Business Conduct

• Display exemplary conduct and live by the Group&rsquos Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

Key Stakeholders

• Cyber Security Services Service Heads, Service Managers
• Access Management & Data Protection – Programme Directors, Project Managers, Service Head and Service Managers
• Access Management & Data Protection Risk and Control team
• CISO/ICS Heads/IT Operational Risk
• Other relevant functions such as CIO teams, Technology Services (End User Services, Infrastructure Services, Network etc.) or business / functions
• Internal / External Auditors

Our Ideal Candidate

• Degree in Engineering, Computer Science/Information or in an appropriate field.
• Minimum 12 years experience Information security domains and IT auditing, preferably in Banking & Financial services experience.
• Knowledge of cyber security frameworks, information security principles, architecture.
• Strong management, leadership, problem solving (critical thinking), motivational, interpersonal and communication skills.
• Customer focusStrong integrity, independence and resilience.
• Excellent communication/presentation skills oral, written and presentation technical reporting writing across various types of target audiences.
• Strong writing skills and is experience in process and/or technical system documentation.
• Strong in excel (intermediate or advanced level) and is experience in performing data analysis and exploration (trend analysis) to aid in identification of problems through metric review.
• Experience of influencing relevant stakeholders and decision makers.
• Highly entrepreneurial with a high level of energy, dedication and an unrelenting drive to deliver value.
• Strong sense of personal ownership and responsibility in accomplishing the organisation&rsquos goal. Is confident and will roll-up his/her sleeves to drive success
• Able to get things done in a quick-paced environment and able to work in tight timeframes. Be transparent and open around what doesn&rsquot work and what does
• Good working knowledge of software application: Outlook (advance), Word (advance), PowerPoint (advance) and Excel (advance).
• One or more of the following certifications will be preferred:
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)

Apply now to join the Bank for those with big career ambitions.
To view information on our benefits including our flexible working please visit our . We welcome conversations on flexible working.