Business Analyst, CLORA (Malaysia, India)

Standard Chartered; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Standard Chartered is seeking a senior business analyst to support CLORA governance and analytics, helping enhance the Tableau-based Control Library and Regulatory Obligations analytics capability. The role translates risk and regulatory needs into a governed delivery roadmap, requirements, and releases that expand CLORA with new data sources and improved data models.

The role collaborates across Business, Risk, Data, Technology, and GRC teams, ensuring lineage, data quality, and a persona-based

Job description

Job Summary

This role could be based in Malaysia and India. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based. The role holder will provide integrated business analysis support for the continued enhancement of CLORA, the Bank’s Tableau-based Control Library and Regulatory Obligations Analytics capability. The role will translate risk, control, regulatory and user needs into a governed delivery roadmap, requirements and releases that expand CLORA with new data sources, simplify and redesign visual journeys, and improve the underlying data model so dashboards load reliably and efficiently. The role will work across Business, Risk, Data, Technology and GRC teams to connect information from M7, ORHS and other approved sources, including regulatory obligations, policies and standards, processes, risks, controls, metrics and metric definitions, as well as events, issues, findings, control testing and related remediation data where approved and available.

This role could be based in Malaysia and India. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based. The role holder will provide integrated business analysis support for the continued enhancement of CLORA, the Bank’s Tableau-based Control Library and Regulatory Obligations Analytics capability. The role will translate risk, control, regulatory and user needs into a governed delivery roadmap, requirements and releases that expand CLORA with new data sources, simplify and redesign visual journeys, and improve the underlying data model so dashboards load reliably and efficiently. The role will work across Business, Risk, Data, Technology and GRC teams to connect information from M7, ORHS and other approved sources, including regulatory obligations, policies and standards, processes, risks, controls, metrics and metric definitions, as well as events, issues, findings, control testing and related remediation data where approved and available. The role will also support alignment and rationalisation across CLORA, the Standards Coverage and Effectiveness Dashboard, the Risk and Control Library Report, and other GRC list reports and dashboards. It will maintain clear distinctions between lineage and definition views and performance or effectiveness views, protect golden-source ownership, improve data quality and traceability, and deliver an intuitive, persona-based experience for senior management, Process Owners, Risk Managers, Policy and Standard Owners, Control Owners, Control Testing, Internal Audit and other stakeholders across the three lines of defence.

Key Responsibilities

Develop and Maintain Control Library & Obligations Register Analytics (CLORA) Tool Governance:

• Requirements Governance: Establish and maintain an end-to-end requirements framework for CLORA enhancements, covering business, functional, data, integration, visualisation, performance, security, access, auditability and operational requirements.
• Use Case Definition: Facilitate workshops and interviews to define persona-based questions and decision journeys, including regulatory traceability, standards and control coverage, risk-to-control lineage, issue and finding oversight, event analysis, impact assessment, gap identification and remediation prioritisation.
• Lineage Integrity: Define requirements for reliable lineage across Regulatory Obligations, Policy Statements, Control Objectives, Control Requirements, Processes, Risks, Library Controls, Control Instances, Metrics and approved downstream records, while distinguishing current, future, expired and historical relationships.
• Integrated Assurance View: Enable users to navigate seamlessly from regulatory obligations, policy statements and control requirements through to controls, metrics, testing outcomes, issues and events, providing a consolidated view of both coverage and control effectiveness.
• Governance Artefacts: Maintain the business requirements document, use cases, user stories, acceptance criteria, process and data-flow diagrams, data dictionary, source-to-target mappings, lineage rules, decision log and requirements traceability matrix.
• Simplification: Identify overlapping or duplicative dashboard content and recommend a coherent target-state information architecture across CLORA, SCE, the Risk and Control Library Report and related GRC dashboards.

Service Expansion & Onboarding Execution

• Data Source Onboarding: Lead discovery, assessment and onboarding of approved sources for events, issues, findings, control testing, regulatory obligations, policies, standards, processes, risks, controls, metric definitions and other relevant GRC entities.
• Source Assessment: Document each source’s ownership, authority, granularity, keys, refresh cycle, history, status fields, effective dating, access restrictions, data-quality limitations and reconciliation requirements before integration.
• Business Rules: Define joining, filtering, deduplication, aggregation, effective-dating and exception rules, including treatment of orphan records, expired relationships, many-to-many relationships, nulls and records not mapped to a process.
• Incremental Delivery: Sequence new source integration through proof of concept, controlled UAT and production releases, ensuring existing lineage and dashboard journeys are not disrupted.
• BAU Transition: Define operating procedures for refreshes, reconciliations, issue handling, release support, ownership and continuous improvement, and ensure these are accepted by the relevant product, data and support teams.

Tooling And Reporting

• Tableau Visual Redesign: Lead a user-centered redesign of landing pages, summaries, drill-downs, filters, tooltips, legends, downloads and navigation. Reduce visual clutter, remove redundant objects and use consistent terminology, colours and interaction patterns.
• Performance and Data Model: Work with Tableau developers, data engineers and architects to redesign the logical and physical data model for efficient querying. Define performance requirements and address row multiplication, inefficient joins, excessive calculations, high-cardinality fields, duplicated extracts and visual objects that adversely affect load times.

Project Planning & Delivery Management

• Own the integrated delivery plan, scope, milestones, dependencies, resources, budget inputs, release calendar and critical path across business analysis, data engineering, Tableau development, testing, governance and deployment.
• Build and manage a prioritised backlog based on regulatory and control urgency, user value, data readiness, technical dependency, delivery effort, risk reduction and expected benefits.
• Apply disciplined change control, assessing impacts to scope, timeline, data lineage, controls, architecture, performance, support and expected benefits before recommending decisions.
• Maintain RAID, dependency, assumption, decision and action logs; elevate blockers with clear options, impacts and recommended actions.
• Coordinate agile ceremonies and delivery governance, including discovery, backlog refinement, sprint planning, demonstrations, retrospectives, stage gates and release readiness.
• Ensure releases have named owners, documented support arrangements, rollback or recovery considerations, communications and training materials.

Testing, Governance And Production Readiness

• Define and coordinate functional, integration, regression, lineage, reconciliation, performance, usability, security and user acceptance testing.
• Create test scenarios that validate source-to-dashboard traceability, relationship logic, filters, aggregations, data-as-of dates, status and effective-date treatment, and prevention of misleading duplicate or historical mappings.
• Coordinate test data and business testers across relevant personas. Maintain evidence of test execution, defects, retests, acceptance decisions and residual risks.
• Lead defect triage, prioritisation and resolution, ensuring data correctness and material performance defects are resolved or formally accepted before release.
• Prepare production-readiness packs and support go/nogo decisions, including approvals, reconciliations, operational procedures, support ownership, release notes, communications and training.

CLORA Lifecycle Ownership

• Support the Product Owner in maintaining the product vision, target-state architecture, roadmap, release plan, benefits framework and lifecycle governance for CLORA.
• Maintain a controlled inventory of data sources, dashboards, views, calculations, business rules, owners, consumers and dependencies.
• Establish user-feedback, idea-intake, issue-management and enhancement processes and convert operational insights into a transparent, prioritised backlog.
• Define success measures covering adoption, usability, data quality, lineage completeness, refresh reliability, load performance, defect leakage, auditability and realised business outcomes.
• Ensure changes to sources, mappings, calculations, visualisations, access or refresh schedules are assessed, tested, approved, documented and communicated.

Training, Awareness And Stakeholder Enablement

• Develop supporting guidance and educational materials that promote consistent interpretation of control lineage, control coverage and assurance information in alignment with the Group Control Standard and Group Control Testing Methodology.
• Deliver training, workshops and awareness sessions to support stakeholder understanding and adoption of the solution.
• Act as a trusted advisor to stakeholders on the application of the Group Control Standard and Group Control Testing Methodology within the solution ecosystem.

Stakeholder Collaboration

• Partner with Process Owners, Group Process Owners, Risk Managers, Risk Framework Owners, Policy and Standard Owners, Control Owners, Control Testing, Operational Risk, IC, Technology, Regulatory Alignment, Data & Analytics, GRC, Architecture, Information Security, and other users across the three lines of defence.
• Translate complex GRC and data topics into clear executive decisions, options and trade-offs, without losing the detail required by developers, testers and data owners.
• Facilitate agreement on definitions, source authority, lineage, coverage logic, data-quality thresholds, performance targets and acceptance criteria.
• Serve as a trusted adviser within the team, providing evidence-based recommendations and transparent status, impact and dependency assessments.

Strategy

• Support the evolution of CLORA from a set of dashboard views into a governed, scalable and reusable risk intelligence capability that can incorporate additional risk and control domains over time.
• Develop a pragmatic roadmap that balances strategic data architecture with near-term delivery, reuse of existing GRC reporting assets and measurable user outcomes.
• Promote common definitions, reusable data products and consistent persona journeys across CLORA to integrate SCE and related GRC data sources.

Business

• Understand senior-management and user decisions supported by each dashboard and ensure features are designed around those decisions rather than around source-system structures.
• Articulate the business value of improved traceability, coverage visibility, data quality, impact analysis and timely risk information.
• Ensure requirements and prioritisation reflect the needs of global, business and functions as well as country stakeholders and the practical operating model of the three lines of defence.

Processes

• Define and improve the end-to-end processes for idea intake, requirements, design, data onboarding, development, testing, approval, release, refresh, incident handling and BAU support.
• Embed traceability from business objective to requirement, user story, data rule, visual, test evidence and release outcome.
• Standardise documentation and hand-offs while simplifying unnecessary controls, duplicate approvals and manual data preparation.

People & Talent

• Create clear ways of working across business analysts, project managers, developers, data engineers, testers and subject matter experts.
• Coach contributors on good requirements, test evidence, GRC data concepts, visual storytelling and disciplined delivery practices.
• Promote an inclusive, collaborative culture that encourages constructive challenge, accountability and continuous learning

Risk Management

• Identify and manage delivery, data, model, lineage, performance