Total 3 job vacancies by Standard Chartered Bank

Job Summary

The Group Internal Audit & Investigations (GIAI) at Standard Chartered Bank is seeking a strong Senior Audit Manager to join the Information and Cyber Security (ICS) team. The role requires solid technical expertise across identity and access management, vulnerability management, code security, security operations, threat intelligence, red and purple teaming, penetration testing, and ICS standards such as NIST and CIS, along with risk management experience. Exposure to AI security and digital assets is highly desirable.

Key Responsibilities

Strategy

• Support the HOA in the development of the GIA risk assessment and development of an appropriate audit plan for the assigned portfolio;

• Propose audits for coverage during the audit cycle based on their knowledge of the business;

• Carry out their role in line with the Audit Charter and remain independent from management and free from interference; and

• Provide clear, effective supervision and leadership to the audit teams and champion the implementation of the strategy.

Business

• Perform, support, or lead where directed, the planning, fieldwork, and reporting of internal audit engagements to deliver agreed assurance objectives to established GIA standards and timelines; and

• Deliver audits/assignments within budget and drive efficiency to support cost save objectives;

Processes

• Act as Team Manager or Team Lead to lead the delivery of high risk audits with integrated teams;

• Execute audit work and issue validation in an efficient and effective manner, within the given budget and timelines;

• Provide clear guidance, detailed review and supervision of the audit team’s work, so that audit deliverables meet quality standards;

• Clearly identify the risks and impact of issues during issue writing, agreeing these issues with management and obtaining quality management action plans to mitigate the risk;

• Provide guidance to the team on business/ audit technical knowledge and management skills;

• Champion innovation and increase the use of leading edge methods, such as artificial intelligence and data analytics, in audit assignments; and

• Track the implementation/delivery of the agreed issues and action plans for the audits assigned, understanding the key risks arising, provide advice on resolution of issues to auditees/action plan owners and escalate audit findings that remain unresolved.

People and Talent

• Share knowledge, skills and experience with team members and the wider GIA and provide advisory to internal auditors from both business and technology on Information and Cyber Security;

• Assist in conducting training sessions for GIA Stakeholders on topics related to Information and Cyber Security;

• Support the function in audit talent development and career growth;

• Develop skills and competencies to support the function in ensuring future readiness; and

• Contribute to building a high performing collaborative function through regular feedback and coaching;

Risk Management

• Complete relevant risk assessment activities in a timely and effective manner, including the completion of the Risk Assessment template;

• Assist in continuous auditing and monitoring of key risks in Information and Cyber Security; and

• Follow changes in the laws and regulations to identify emerging risks.

Governance

• Assist the HOA to manage the relevant Product/Country clients, and establish good working relationships to help the businesses improve the control environment and keep updated with changes in the business impacting their risk profile;

• Ensure clear communication of findings/issues/root causes to all relevant clients and monitor/escalate any overdue actions plans to the appropriate business manager and/or governance committee for resolution; and

• Ensure timely escalation of delays in execution of audit work, both to auditee management and GIA management.

Regulatory and Business Conduct

• Display exemplary conduct and live by the Group’s Values and Code of Conduct;

• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct; and

• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

Key Stakeholders

• Designated business stakeholders, typically related to individual audit assignments and the Information and Cyber Security portfolio; and

• GIA stakeholders – team leaders, team members, team managers, Product, Functional, Country and Regional Heads of Audit.

Other Responsibilities

• Embed Here for good and Group’s brand and values in GIA; and

• Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures.

Skills and Experience

Technical and Audit Skills:

• Strong understanding of identity and access management, vulnerability management, code security, security operation centre, threat intelligence, red and purple teaming, penetration testing, ICS related industry standards such as NIST and CIS, and risk management.

• IT infrastructure components, including servers, networks, databases, and cloud services would be a plus.

• Knowledge of cybersecurity principles, frameworks, and best practices.

• Proficiency in audit tools and techniques.

Professional Certifications:

• Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Cloud Security Professional (CCSP), and Global Information Assurance Certification (GIAC) related certificates are highly desirable. Other designations such as Certified in Risk and Information Systems Control (CRISC) and Certified Information Security Manager (CISM), and Certified Internal Auditor (CIA) are a plus.

Analytical Skills:

• Excellent analytical and problem-solving abilities with a keen attention to detail.

Soft Skills:

• Communication Skills: Strong written and verbal communication skills to effectively convey audit findings and recommendations.

• Interpersonal Skills: Ability to work collaboratively with cross-functional teams and build strong relationships with stakeholders.

• Group Information and Cyber Security Risk

• Information and Cyber Security domain knowledge (e.g. Identity and Access Management, Third Party Risk Management)

• Audit

• Risk and Controls

• Business Language (Written/Spoken)

• Microsoft Word/Excel/PowerPoint

Our Ideal Candidate

• 12 years of experience in IT auditing, information security, or risk management.

• In-depth understanding of Information and Cyber Security risk management and associated control requirements;

• Strong communicator, both written and verbal, with ability to clearly explain complicated technical issues in business terms to audit and business management;

• Team management, team leading, coaching and mentoring, problem solving and conflict management, multi-tasking, risk assessment and collaboration.

• Strong understanding of identity and access management, vulnerability management, code security, security operation centre, threat intelligence, red and purple teaming, penetration testing, ICS related industry standards such as NIST and CIS, and risk management.

• IT infrastructure components, including servers, networks, databases, and cloud services would be a plus.

• Knowledge of cybersecurity principles, frameworks, and best practices.

• Proficiency in audit tools and techniques.

• Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Cloud Security Professional (CCSP), and Global Information Assurance Certification (GIAC) related certificates are highly desirable. Other designations such as Certified in Risk and Information Systems Control (CRISC) and Certified Information Security Manager (CISM), and Certified Internal Auditor (CIA) are a plus.

• Excellent analytical and problem-solving abilities with a keen attention to detail

• Bachelor’s degree in information technology, Computer Science, Information Systems, or a related field. A master's degree is a plus.

Role Specific Technical Competencies

• Group Information and Cyber Security Risk

• Information and Cyber Security domain knowledge (e.g. Identity and Access Management, Third Party Risk Management)

• Audit

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do

• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well

• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.

• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.

• Flexible working options based around home and office locations, with flexible working patterns.

• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits

• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.

• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

Recruitment Assessments

Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.

Visit our careers website www.sc.com/careers

Job Summary

This role could be based in Singapore and Hong Kong. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based.

Diversity & Inclusion Statement

Standard Chartered is committed to diversity and inclusion. We believe that a work environment which embraces diversity will enable us to get the best out of the broadest spectrum of people to sustain strong business performance and competitive advantage. By building an inclusive culture, each employee can develop a sense of belonging, and have the opportunity to maximise their personal potential.

Job Description

Group Internal Audit (GIA) is looking for an experienced and dynamic audit professional with a solid background and strong knowledge around the key risks and controls in SCV.

The role-holder will be an integral part of the SCV Audit team. The team provides independent assessments of risk management and internal control environment of SCV globally.

We pride ourselves in being auditors of the future, forward-looking and agile with a keen focus on smarter auditing. When you join us, you will enter a role that challenges the status quo and moves mindsets and be a part of the future of banking.

This role currently reports to Head of Audit, Singapore, ASEAN and SCV.

Key Responsibilities

• To act as a Team Engagement Lead on assigned audit work involving SCV across the bank. This covers managing the auditors working on the audit to deliver the Audit Planning Memo, Controls Document, agree issues and action plans with management and submission of draft report to the Audit Engagement Team Manager for review;

• To act as Audit Engagement Team Manager and take responsibility for overseeing the delivery of high quality audits, including finalising of audit issues and the audit report;

• To be the office lead for SCV audit ensuring the wellbeing of more junior staff located in the same office.

• To ensure that own assigned audit work, as well as the work carried out by team members is executed in an efficient and effective manner, within the given budget and timelines, and in line with GIA methodology standards;

• To clearly identify the risks and impact of issues during issue writing, agreeing these issues with management and obtaining quality management action plans to mitigate the risks raised;

• To lead continuous monitoring of assigned countries / portfolio areas within the specific portfolio environment, and to build and maintain engagement with stakeholders;

• To take responsibility for the design and implementation of department wide exercises such as annual planning, risk assessment and training;

• To support GIA audit teams by providing product/country knowledge and expertise for their audits relating to the individual’s area of responsibility as the Subject Matter Expert;

• To assist with drafting Committee updates, attend and present at formal committees and Group meetings on behalf of the HOA or for their own area of responsibility, as required, e.g. Process Governance Committees and Country Operational Risk Committees;

• The individual will support the HOA in their role as the GIA portfolio/country subject matter expert, depending on the skills of the individual; and

• Issue validation: Ensure that all audit issues raised during audits and continuous monitoring engagements are tracked to completion in accordance with the methodology requirements.

Strategy

• Support the HOA where required, in the development of the GIA risk assessment and development of an appropriate audit plan for the HOA’s assigned portfolio;

• Support the HOA to ensure that audits assigned to the individual in the GIA audit plan address the key risks identified in the detailed risk assessment and in the audit planning process, and meet relevant regulatory requirements and expectations that are required to be covered by GIA;

• Ensure that the assigned audit plan remains relevant throughout the year as the risk profile of the business changes. Propose changes as appropriate; and

• Ensure that audit team operates in line with the Audit Charter during engagements, remains independent from management and free from interference.

Business

• Assist the HOA deliver assigned audits within the allocated budget as well as identify and implement opportunities for cost savings and optimal productivity of assigned audit engagements.

Processes

• To act as a Team Lead or Team Manager on assigned audit work involving SCV portfolio across the bank. This will entail managing the auditors working on the audit to deliver the Audit Planning Memo, Controls Document, agree issues and action plans with management and submission of draft report to the Audit Manager for review;

• Provide clear guidance, detailed review and supervision of the audit team’s work to ensure that audit deliverables meet quality standards and timelines in line with the GIA methodology;

• Provide guidance on business/audit technical knowledge and management skills to team leaders and team members to enable them to effectively deliver their assigned contributions for an audit;

• Provide technical input and challenge on audit work being undertaken within the scope of assigned product / country area of responsibility. This will include working with the audit team to ensure outputs are of high quality and address relevant risk;

• Ensure GIA methodology is adhered to in all areas of the audit engagement, as well as raising team members’ awareness and understanding of the methodology;

• Demonstrate sound knowledge of both business/technical areas and expert knowledge in the audit process, including the GIA system, to ensure that audit work is carried out to a high standard that meets all methodology and GIA system requirements;

• Take the lead in presenting the draft report in the GIA report review process (to the report review group or report approver); and

• Monitor the implementation/delivery of the agreed issues/audit plans for the audits assigned, understanding the key risks arising, provide advice on resolution of issues to auditees/action plan owners and escalate audit findings that remain unresolved.

People and Talent

• Demonstrate strong leadership and ability to motivate and guide audit team leaders and members

• Influence change within the department by highlighting potential enhancements;

• Identify growth areas at the start of each audit, and discuss with the Audit Lead/team members on how best to work on them during the audit;

• Provide written performance feedback to team lead/team members at the end of an audit.

• Identify and successfully complete key internal training for self-development;

• Facilitate the development of audit team members by providing on the job training and recommending formal training to support GIA activities; and

• Support the HOA to proactively spot talent for GIA.

Risk Management

• Support the HOA to update the relevant assigned risk assessments on a regular basis to ensure that changes in risk profiles are identified in a timely manner, proposing changes to the assigned audit plan to the HOA, as appropriate;

• Ensure early identification and escalation of risks, issues, trends and developments to relevant stakeholders. Be prepared to raise issues/concerns outside the normal audit process;

• Attend relevant meetings relevant to assigned country / product area (e.g. PSCs, Management Groups and Committees) in addition to request of the HOA to keep up-to-date on key business matters and provide the right challenge to ensure risks are appropriately identified, discussed and timely remediation plans are put in place;

• Adopt an anticipatory approach to risk assessment through stakeholder engagement and monitoring of the external environment to improve audit planning; and

• Review MI and reports regularly to keep up-to-date with key trends within the business.

Governance

• Assist the HOA to manage the relevant Product/Country stakeholders, and establish good working relationships to help the businesses improve the control environment and keep updated with changes in the business impacting their risk profile;

• Propose changes to audit plans to the HOA, as appropriate, to ensure the audit plan remains relevant;

• Lead by example on how to communicate audit-related matters and resolve any conflict between auditors and auditees during the course of an audit. Use networks and relationships to build engagement and achieve results;

• Ensure timely escalation of delays in execution of audit work, both to auditee management and GIA management; and

• Be able to clearly explain issues identified along with the risks and root causes to GIA and business management, using language designed to be understood by non-experts.

Regulatory and Business Conduct

• Display exemplary conduct and live by the Group’s Values and Code of Conduct.

• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct;

• Contribute to the audit team in achieving the outcomes set out in the Bank’s Conduct Principles: Financial Crime Prevention and The Right Environment; and

• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

Key stakeholders

• Establish and maintain effective engagement with Senior Stakeholders within the specific business/function which fall under risk assessment responsibility; and

• Continuous engagement with Senior stakeholders and provision of timely committee updates.

Other Responsibilities

• Embed Here for good and Group’s brand and values in GIA; and

• Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures.

Our Ideal Candidate

• Possess in depth audit experience with 8 years of experience having covered the Banking in general;

• Experience in the design and execution of audit engagements;

• In-depth understanding of governance, risk management and associated control requirements;

• Strong communicator, both written and verbal, with ability to clearly explain controls to be tested and risks identified to audit and business management;

• Confident and courageous to raise and escalate ideas or concerns in a, professional and timely manner;

• Proactive, self-directed and able to work with minimum supervision;

• Ability to exercise good judgement and objectivity;

• Ability to work within a global team, including leading audit team members remotely;

• Demonstrate understanding of and commitment to the Group’s core values;

• Professional audit certification preferred; and

• Ability to commit to limited business travel.

Role Specific Technical Competencies

• Internal Audit

• Risk Assessment

• Stakeholder Management

• Products and Processes

• Audit Report Writing

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do

• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well

• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.

• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.

• Flexible working options based around home and office locations, with flexible working patterns.

• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits

• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.

• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

Recruitment Assessments

Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.

Visit our careers website www.sc.com/careers

Job Summary

The Senior Audit Manager, Digital Assets is responsible for providing independent and objective assurance over the Group’s Digital Assets activities, businesses and strategic initiatives. This role is accountable for end-to-end internal audit coverage, including audit planning, risk assessment, audit execution, reporting and continuous business monitoring of digital asset products, platforms, governance and risk management frameworks. Leading and executing audits across digital assets custody, trading, tokenisation and platforms.

The role ensures that digital asset activities are conducted within Group’s risk appetite, in compliance with regulatory expectations, and in line with internal policies. The role works closely with other Group Internal Audit teams and key stakeholders across the business, risk, technology and compliance functions to deliver a coordinated and integrated audit approach, and to provide senior management and the Board with clear insight into digital assets risks, control effectiveness and emerging issues.

Key Responsibilities

• Leads and develops audit team by setting clear direction, providing technical guidance and accountable for end-to-end audit outcomes.

• Acts as the central audit point of contact for all digital asset’s stakeholders across the Group.

• Develop and maintain a risk-based audit plan for digital assets activities in accordance with IIA Standards and the Group Internal Audit methodology.

• Perform periodic and continuous risk assessments to identify and assess key risks arising from digital assets activities, new initiatives, regulatory changes and external developments.

• Plan and perform internal audit engagements in line with IIA Standards, including defining audit objectives, scope, and criteria for digital asset audits.

• Obtain sufficient, reliable, relevant and useful information to provide a reasonable basis for audit conclusions, including through walkthroughs, control testing, data analysis, and interviews.

• Evaluate the design and operating effectiveness of governance, risk management and internal control processes over digital assets activities.

• Assess whether digital asset activities are conducted in line with the Group’s risk appetite, internal policies and applicable laws and regulations.

• Identify and clearly document audit findings, root causes, risk implications, and control weaknesses in accordance with Group Internal Audit standards and documentation requirements.

• Communicate audit result through clear, accurate, and timely reporting to management and relevant governance forums and/or committees.

• Monitor and follow up on management actions plans to ensure effective and timely remediation of audit issues.

• Maintain independence and objectivity while providing credible and constructive challenge to management.

• Coordinate with other Group Internal Audit teams to ensure adequate coverage, avoid duplication, and support a consistent and integrated assurance approach.

• Contribute to quality assurance and improvement activities within Group Internal Audit, including methodology enhancements and peer reviews.

• Maintain up-to-date knowledge of digital asset risks, regulatory expectations, and industry practices to continuously enhance audit effectiveness.

Our Ideal Candidate

• Certified Internal Auditor (CIA) and/or Certified Information System Auditor (CISA)

• 8+ years working experience in audit, risk or control functions, with relevant exposure to digital assets including blockchain infrastructure, custody models, trading platforms or tokenised products.

• Strong digital assets domain knowledge of blockchain, wallets (Hot/Cold/MPC), exchanges, custody, tokenisation and DeFi

• Technology, smart contract and key management (HSM,MPC) understanding

• Excellent communication and stakeholder engagement skills, including the ability to influence at senior levels.

• Outstanding communication skills, both oral, written and presentation.

• A Bachelor's degree or higher in a relevant discipline such as Finance, Accounting, Business Administration, Information Systems, Computer Science or a related field is required to support the technical knowledge necessary for this role.

• Formal training and strong working knowledge of financial crime and/or technology risk related to digital assets.

• A recognised professional qualification in auditing, accounting, or risk management (e.g., CA, CIA, CISA, or equivalent) is highly preferred, affirming the candidate’s commitment to professional excellence and continuous development.

Role Specific Technical Competencies

• Risk Assessment

• Stakeholder Management

• Products and Processes

• Audit Report Writing

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do

• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well

• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.

• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.

• Flexible working options based around home and office locations, with flexible working patterns.

• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits

• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.

• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

Recruitment Assessments

Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.

Visit our careers website www.sc.com/careers