Cyber Security Services

Job Description

About Standard Chartered We are a leading international bank focused on helping people and companies prosper across Asia, Africa and the Middle East.To us, good performance is about much more than turning a profit. Its about showing how you embody our valued behaviours - do the right thing, better together and never settle - as well as our brand promise, Here for good.Were committed to promoting equality in the workplace and creating an inclusive and flexible culture - one where everyone can realise their full potential and make a positive contribution to our organisation. This in turn helps us to provide better support to our broad client base.Purpose of Job:The Information Security Senior Analyst role sits within the Identity Access Management (IAM) & Data Protection (DP) Risk and Control team. The main responsibilities will be to support the Manager of Risk & Control in identifying and managing IT Security Operations Risk for IAM which includes raising & managing IT Security operations risks via organization s existing Risk channels such as Stress Tests, Risk Acceptance Papers, EORP /CRISP. The person is also expected to drive security program to reduce or minimize identified operational risks through forward planning of operational reviews, reporting on progress of reviews, analyzing performance and delivery of teams, and maintaining appropriate internal controls. This role will manage and engage stakeholders effectively from regulatory, external and internal audit. Support audit activities and ensure that CSS are meeting their audit and regulatory obligations.Key Roles & Responsibilities:Interact with all levels of management while coordinating and managing issues with potential Risks.Manage a register of identified security risks and ensure that deficiencies are mitigated.Ability to present the identified risks to the business with suggestions around mitigating controlAbility to carry out risk and control assessmentAbility to multitask and ensure that all key priorities are delivered as per agreed timelinesAssist in the development of policies, internal controls, procedures and guidelines.Support any training and awareness initiatives relating to minimizing security operational risks.Facilitate internal verification or investigation on the audit findings or observationsFacilitate to review audit findings with IAM & DP service owners and provide timely management responses to the findings, including remediation actionsServe as single point of contact for IAM & DP to handle all information request from auditors, and provide responses centrally to regulatory audit or internal auditEnsure information provided to regulatory and audit is accurate, relevant and up to dateManage all Audit findings, observations and actions are tracked.Manage all the cyber stress test findings and ensure all the actions are tracked.Proactively review and identify existing and/or emerging risks and/or non-compliance, engage service owners effectively to facilitate remediation on time in fullEnsure controls are measured and metric provided to all relevant risk forums.KEY STAKEHOLDERS:TS, T&I R&CCSS R&CCISO R&CCISRO /GORGIAExternal, Regulatory AuditorsCOMPETENCIES (KNOWLEDGE & SKILLS):Minimum 10 years experience in Banking, Information Security with focus on Identity and access & Data ProtectionMinimum 8 years experience as Risk and Controls ExpertExcellent written and oral and presentation and communication skillsExperience in writing assurance reports is an added advantageKnowledge around industry standard security control frameworksStrong sense of personal ownership and responsibility in accomplishing the organisation s goal. Exudes confidence and will roll-up his/her sleeves to drive successAble to get things done in a quick-paced environment. Be transparent and open around what doesn t work and what doesGood understanding of regulatory compliance, IT security, IT risk and controlsAbility to collect and analyse data, establish facts and make recommendations in written and oral formStrong Technical skills and good understanding in access management across platforms/Applications and Data ProtectionStrong interpersonal and team skills.Bachelor Degree in Computer Science/Information Technology, Engineering, Finance or its equivalentCISSP / CISA / CISM /COBIT trained or certified will be a definite advantageApply now to join the Bank for those with big career ambitions.To view information on our benefits including our flexible working please visit our career pages .,

Keyskills :
it security operationsidentity access management access managementinternal controls security operationsinformation security regul