**Job***: Technology**Primary Location***: Asia-Indonesia-Jakarta**Schedule***: Full-time**Employee Status***: Permanent**Posting Date***: 24/Aug/2023, 9:31:14 AM**Unposting Date***: Ongoing**Role Responsibilities**Risk and Control Manager is responsible to ensure that Technology and Innovation ("T&I") team operate in full compliance with all Country and Group policies as well as local regulatory requirements.**Strategy**- Ensuring business strategies, standards and roadmap abide by T&I operating principles, policies and procedures of Country and Group and the Enterprise Risk Management Framework ("ERMF")- Ensuring the execution of T&I functions are fully compliant with statutory regulations, laws, guidelines and industry practices for Technology Risk Management, Information & Cyber Security covering T&I Security Technology Services ("STS") and Technology Governance- Support the T&I team in the overall effective and proactive management of all T&I risks, governance and controls**Business*****Audit/Regulatory Support- Provide timely response and Act as Liaison Officer for Internal and external IT related Audits/Internal Review/Peer Review- Provide IT Data when requested by Regulators- Draft management response for regulatory findings or queries- Respond to Country compliance requests for submission to regulators**Processes**System Stability- Support the Cluster CIO to formulate the strategic plan in enhancing the system stability from a risk point of view- Review and provide oversight on the root cause analysis and follow-up on the closure of remediation plans- Provide oversight on the performance of the T&I service providers- Oversee the ongoing treatment of obsolescence risk- Review and provide oversight on effective contingency and resilience of Technology Service DeliveryInformation Security- Ensure T&I relevant ICS policy is well circulated amongst Bank's businesses, functions, geographies and subsidiaries- Ensure applicable controls are identified, assessed and implemented by the business owners- Collaborate with Group Security Technology Services on local governance, where needed***People & Talent**- Provide broader awareness internally to proactively manage current and emerging risks- Provide industry guidance and support acting as SCBT go to "expert" and speaking opportunities**Risk Management**- Support the Cluster CIO as the 1st line Risk Framework Owner for Technology, and work closely with the other relevant risk types such as Information and Cyber Security ("ICS") Risk, Compliance Risk, Conduct Risk and Reputational Risk, in accordance with the ERMF- Responsible for the preparation, communication, implementation, delivery and expansion of T&I risk management plans and represent T&I to liaise with regulators on technology risk governance- Oversee the implementation of Group T&I Policies and Standards in country and/or Cluster- Oversee effective risk management practice implementation in T&I including Risk Identification, Assessments, Measurements, Acceptance and Monitoring- Oversee internal and external/ regulatory audit exercises and the progress of remediation plans for the identified gaps, and ensure relevant risk incurred is properly managed through ERMF- Oversee regular residual risk assessment and risk acceptance for T&I processes- Provide timely and accurate management reporting to the CIO and relevant senior stakeholders for proper manage of technology and ICS risks- Provide support for the End User Computing implementation- Drive proactive risk management culture in T&I**Governance**- Represent T&I in various risk forums and committees (e.g. Business Forums, Third-Party Risk Management Sub-Committee, ID Data Governance Committee).- Drive effective risk discussions within the Cluster T&I Risk Forum and oversee timely remediation of identified risks- Represent T&I Risk & Control ("R&C") in other committees/ forums whenever necessary such as Project Steering Committee, and assist regulatory approvals for e-Banking and technology outsourcing initiatives whenever necessary, IT Non Financial Risk Forum**Regulatory & Business Conduct**- Display exemplary conduct and live by the Group's Values and Code of Conduct- Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct- Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters- Lead Indonesia to achieve the outcomes set out in the Bank's Conduct Principles: Fair Outcomes for Clients; Effective Financial Markets; Financial Crime Compliance; The Right Environment- Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and
