Risk Manager - Public Cloud(Malaysia, India)

Standard Chartered Bank; Kuala Lumpur; Hybrid; MYR 150,000 - 200,000; Full time

Job summary

A leading global bank is seeking an Operational Risk Manager for Public Cloud based in Kuala Lumpur or India. The role involves defining a control environment, managing risk, and ensuring compliance with the Bank’s frameworks. Strong operational risk management experience and communication skills are essential. This position offers the challenge of improving risk identification and mitigation strategies within the organization.

Qualifications

• Experience in operational risk management within the banking sector.
• Strong understanding of risk management frameworks and practices.
• Excellent communication and stakeholder management skills.

Responsibilities

• Identify, assess, manage and govern risk using the Bank's frameworks.
• Maintain and implement the risk and control process for the first line of defence.
• Advise on the compliance with enterprise risk management framework.

Job description

Risk Manager - Public Cloud(Malaysia, India)

This role could be based in India and Malaysia.

We are seeking an accomplished and forward-thinking professional to join our organisation as the Operational Risk Manager for Public Cloud. In this pivotal role you will drive the responsibilities for defining and operating a control environment for people, process and technology that enables the domain to reduce operational and technology risk to a level within the Group’s risk appetite while satisfying control objectives defined in relevant Group policies and external regulations.

• Partner closely with Enterprise Technology Domain Stakeholders, CSS, CISRO, Group Operational Risk and Group Internal Audit and manage all aspects of initiatives emanating from same for this domain.
• Proactive Controls Assessment, Issue Management, Audit and Regulatory Inspection Facilitation and other related tasks.

RESPONSIBILITIES

This role is responsible for identifying, assessing, managing and governing risk through the application of the Bank’s Enterprise Risk Management Framework and specifically the underpinning Operational Risk Type Framework and with consideration given to industry standards and best practices.

• Continuing improvements in the Domain(s)’s approach to risk identification and mitigation, control management and audit engagement within the framework set out by the relevant authorities.
• Ensuring a constant state of preparation, readiness and continuous improvement across process, risk management and reduction, audit success, documentation, MIS systems and reporting.
• Maintain & Implement Risk and Control Process for 1st line of defence as per bank’s ERMF.
• Identify risk profile / R&R for all parties involved, Cloud Platform support Mgr, Platform engineer , Domain heads etc.
• Document & Maintain (review periodically for applicability, improvement and efficiency) the Risk Management process on Domain Risk Meetings, MOM Templates, Audit Engagements, Risk Approvals, Risk Extensions, Risk Assessments and Risk reviews done by UORM.
• Maintain central data repository for Risk & Control.
• Risk Profile, Risk Analysis (Operational M7 & CRISP Security risks), Stakeholder engagement Matrix, CSAR Status, list of GIA Audits and status, Open and Overdue Audit status etc.
• Ensure Awareness of Rules of Engagement w.r.t Risk Management to all domain stakeholders either directly or through UORMs and Leadership to ensure consistency across domains.

Advise and assist the Cloud & DevOps Portfolio Head(s) in driving and directing effective compliance with the prescribed Enterprise risk management framework.

Implement effective and efficient controls to minimise / mitigate operational impact.

Ensure proper management of risk and timely resolution of issues.

Promote understanding, practice and culture of Enterprise Operational Risk within the Domain(s).

Good understanding of Group T&O strategy and its implications managing strategic programs with respect to technology risk management role.