Lead, Third Party Resilience Risk Assurance

STANDARD CHARTERED BANK; Singapore; On-site; SGD 150,000 - 190,000; Full time

Job summary

STANDARD CHARTERED BANK is seeking a Lead, Third Party Resilience Assurance to design, maintain and enhance Third Party Resilience requirements across the Group Operational Resilience and Business Continuity Standards. The role leads delivery, controls, reporting and governance across Third Party Resilience initiatives, coordinating with TPRM, SCM, Legal and the wider Resilience community.

You will help ensure compliance with regulatory expectations, identify gaps, and deliver data-driven

Responsibilities

• Manage delivery of Third Party Resilience governance, controls and processes
• Lead risk-based assessments of business continuity and resilience capabilities
• Coordinate across Third Party Risk Management, SCM, Legal, and Resilience communities
• Drive strategy for risk-based, data-driven assurance coverage across Third Party Resilience
• Deliver targeted thematic reviews to identify control weaknesses and emerging risks
• Evaluate continuity plans and recovery strategies for adequacy and effectiveness
• Ensure compliance with internal policies, regulatory requirements and industry standards
• Provide independent SME input to standardise Third Party resilience processes across vendors and non-vendors

Job description

Job Summary

Group Resilience is responsible for enabling the Bank to anticipate, withstand, respond to, recover from, and learn from operational disruptions through a unified framework and capabilities to meet regulatory expectations and strengthen operational readiness. We continue to stay committed to enhancing and embedding resilience as a capability throughout the Bank, via a comprehensive approach which encompasses 3 key pillars: Resilience, Resolvability and Crisis Management.Operational Resilience ensures the safeguarding of the Bank's critical business services and their supporting resources, ensuring they can function effectively during adverse events. Resolvability ensures the Bank can maintain continuity of critical operations and access to services in the event of severe stress or resolution, in line with regulatory expectations. Crisis Management provides the structures, capabilities, and coordination required to respond decisively to incidents, protect stakeholders, and stabilise the Bank during periods of heightened uncertainty. As a collective, these pillars support regulatory compliance, protect stakeholders, and reinforce the Bank's reputation as a trusted and reliable institution.Group Resilience plays a pivotal role in supporting the Bank by implementing robust frameworks, monitoring risks, and maintaining compliance with evolving regulatory requirements. Through proactive planning, rigorous testing, and continuous improvement, we help to ensure the Bank remains resilient and well-positioned to serve our customers and stakeholders.The role of Lead, Third Party Resilience Assurance is responsible for supporting the design, maintenance and continuous enhancement of Third Party Resilience requirements within the Group Operational Resilience and Business Continuity Standards, and for ensuring delivery of Third Party Resilience activities across the Bank. This includes leadership of operational delivery, controls, reporting and governance across the Third Party Resilience agenda.The role holder will work closely with stakeholders across Third Party Risk Management (TPRM), Supply Chain Management (SCM), Legal, the businesses and the wider Resilience community, including the Operational Resilience programme, to ensure effective coordination and delivery of Third Party Resilience activities.

Key Responsibilities

Strategy

• Manage the delivery of processes, controls and governance of Third Party Resilience, and ensure alignment with the Bank's global strategic direction and with regulatory requirements.
• Support digitisation and transformation activities to drive the Third Party Resilience of the Bank, including but not limited to tooling, processes, and continuity management.
• Influence Resilience by Design principles across all Third Party initiatives, including with stakeholders from Business and functions.
• Act as Subject Matter Expert on Third Party Risk Management deliverables to influence and improve business understanding of Resilience requirements related to Third Party regulations.
• Act as Subject Matter Expert on Third Party Risk Management deliverables pertaining to Non-Tech Vendors, Non-Tech Non-Vendors, Intragroup Arrangements and FMIs.
• Required to support the Head of Third Party Resilience in delivery of a strategy for provision of risk based and data driven assurance coverage across Third Party Resilience, taking account of industry good practice.
• Conduct risk-based assessments of business continuity and operational resilience capabilities across business units and functions.
• Lead and deliver targeted thematic reviews across Third Party Resilience processes to identify systemic issues, recurring control weaknesses, and emerging risk trends.
• Develop forward-looking, risk-based insights by identifying emerging vulnerabilities, control deficiencies, and areas of heightened risk exposure, and provide strategic, actionable recommendations to address root causes at a structural level and drive sustainable improvements.
• Evaluate the adequacy and effectiveness of continuity plans, recovery strategies, and resilience controls.
• Assess compliance with internal policies, regulatory requirements, and industry standards.
• Identify control gaps, emerging risks and areas requiring remediation.
• Provide a risk-based independent view to Senior Management, Second Line and the Board as to the effectiveness of the Bank's policies, processes, systems and controls.
• Facilitates identification of any gaps & inefficiencies, enabling prompt corrective action to be taken, and is a key source of evidence for the Board & Regulators.
• Provide SME inputs to standardise Third Party resilience processes across all Resilience Processes as well as across all Third Party types (vendors, non-vendors and Intragroup arrangements).
• Implement a technology-enabled assurance strategy, integrating data analytics and automation to enhance risk identification and audit effic