Director, Risk Governance

Job ID: 28149

Location: Kuala Lumpur, MY

Area of interest: Technology

Job type: Regular Employee

Work style: Office Working

Opening date: 7 May 2025

**Job Summary**
- This role is accountable for the design and execution of risk governance across the Technology and Operations (T&O) function.- The Director, Risk Governance, will lead the coordination of senior risk forums, support effective oversight of the T&O risk profile, and enable transparent and forward-looking risk management. The role plays a key part in strengthening the function’s non-financial risk governance and engagement across Group, Cluster, and Country levels.**Strategy**
- Shape the risk governance model for T&O, aligned to the function’s risk strategy and the Group’s overall governance framework.
- Elevate the role of forums as enablers of proactive, insight-led risk management.

**Business**
- Lead the end-to-end design and delivery of key risk governance forums:

- T&O Non-Financial Risk Committee (T&O NFRC)
- Group ICS Risk Forum
- T&O Executive Risk Reviews
- Support the development of cluster and country governance, including the facilitation of engagement models and governance packs.

**Key Responsibilities**

**Processes**
- Drive consistent execution of governance forums - agenda setting, pre-read curation, minutes, and action tracking.
- Run focused deep-dive sessions on areas of material risk (e.g. status of ERR treatment plans, top residual risks, remediation progress).
- Partner with risk teams to identify and escalate thematic or emerging risks for forum discussion.

**People & Talent**
- Build expertise within the team around risk reporting, executive-level engagement, and regulatory expectations for governance.
- Foster a high-trust, collaborative culture where team members are empowered to drive change and take ownership..

**Risk Management**
- Ensure that risk issues, themes, and metrics are escalated through the right governance channels in a timely and effective manner.
- Actively contribute to the identification of emerging risk themes, control weaknesses, and process improvement opportunities via governance outcomes.
- Monitor the quality and consistency of risk reporting across forums, escalating where gaps are identified.
- Partner with risk owners and second-line teams to ensure accurate, forward-looking, and balanced discussions at all governance levels.

**Governance**
- Act as the Group-level owner for T&O’s non-financial risk governance framework.
- Ensure all forums operate in accordance with the Group’s governance policy, with clear charters, defined roles, and traceable decision-making.
- Maintain audit readiness and ensure governance artefacts (e.g. ToRs, packs, minutes, actions) are consistently documented and archived.
- Drive alignment of governance routines across countries, ensuring upward visibility and consistency from local to global forums.
- Continually seek to enhance the governance model — simplifying where possible, closing design gaps, and strengthening the link between risk governance and business outcomes.

**Regulatory & Business Conduct**
- Display exemplary conduct and live by the Group’s Values and Code of Conduct.
- Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
- Lead the function to achieve the outcomes set out in the Bank’s Conduct Principles: [Fair Outcomes for Clients; Effective Financial Markets; Financial Crime Compliance; The Right Environment.] *
- Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

**Skills and Experience**
- Risk Management
- Analytical Thinking
- Planning: Tactical, Strategic
- Managing Change
- Stakeholder Management
- Data & Reporting
- Project Management

**Qualifications**
- Bachelor’s or Master’s degree in Risk Management, Law, Business Administration, Technology, or a related field
- CISM, CISSP, CRISC (for cybersecurity and risk expertise).
- CFA, FRM, or similar risk qualifications (for broader risk governance knowledge).
- ICA or other compliance certifications (for regulatory engagement expertise).

**About Standard Chartered**
- We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.- Our purpose, to drive commerce and prosperity through our unique diversity