Operational Risk Senior Manager - Technology
About the Job
The purpose of this role is to oversee the Enterprise IT department (which includes the cyber security team) as part of the 2nd line of defence Operational Risk team, within the overall Risk department. This involves operating the operational risk management framework by working with Enterprise IT and other relevant departments to identify, assess, monitor and report on the technology operational risks faced by the Bank.
The role will have a secondary focus supporting the broader Operational Risk team in providing 2nd line oversight of other business areas and support functions as required from time to time, although specialist knowledge of these areas is not a pre-requisite.
The role reports to the CISO & DPO.
What you'll be doing
- Facilitating Risk and Control Self Assessments (RCSA) by Risk Owners to ensure completeness (e.g. against industry standard frameworks such as COBIT, ITIL, NIST, ISO) and accuracy. This will include running risk assessment workshops with various business areas and support functions, and consolidating the results into operational risk maps
- Advise Risk Owners on methods to develop and implement risk identification processes that incorporate internal and external business environment, integrates key risk indicators, business process changes and loss experience to effectively monitor risk in accordance with established operational framework and methodologies
- Collecting and analysing operational incidents to ensure that relevant lessons are learnt; agreed action plans monitoring and escalating the issues to the management attention when necessary
- Providing independent 2nd line assurance of the effectiveness of the control environment (through thematic reviews and key controls testing) and advising on likely effective control approaches and mitigation activities
- Building strong relationships with relevant business areas to be aware of business developments and their impact on the operational risk profile
- Building strong relationships to work with Op Risk colleagues in other locations
- Monitoring and reporting on risk status and changes to the control environment
What you'll need to be successful
Experience of working in a regulated environment, ideally Financial ServicesKnowledge of IT and cyber security 1st, 2nd or 3rd line rolesKnowledge of COBIT, ITIL, NIST, ISO frameworksUnderstanding of risk and control and risk management, ideally operational risk managementExperience of effective time and resource management to ensure that objectives are achieved and projects are delivered on time.Skills in working as part of a team to achieve team objectives and goalsComfortable dealing with senior management and building relationships with a variety of stakeholders and partnersSkills in leadership to engage with stakeholders, present ideas clearly to both individuals and groups and lead function initiatives to ensure that work is completed in a controlled and efficient mannerStrong written skills to communicate risks and recommendations clearlyWhy should you join us?
ICBC Standard Bank Plc (ICBCS) is a leading financial markets and commodities bank, driven to deliver the right outcomes for our stakeholders, clients, counterparties and markets. We benefit from a unique Chinese and African parentage and an unrivalled global network and expertise. We're headquartered in London, with operations in Shanghai, Singapore and New York.
We're a diverse and close-knit global team. We put people first, giving talented, self-driven professionals the flexibility, rewards and freedom to grow their expertise and realise their potential.
Our vison statement, "Be Yourself, Succeed Together" underpins our drive for an open and transparent culture which values difference, enabling everyone to thrive whilst being themselves. We have an active ED&I forum and we're growing other employee network groups, including for women and neurodiversity.
We're committed to the principle of equal opportunities. All applicants will be treated equally and will be considered on their merits and skills without discrimination.
What's in it for you?
Financial market-based pay based on skills and experience, discretionary annual bonus, pension contribution 10% (employee contribution 5%), travel insurance, life assurance and income replacement insurance.Hybrid working the option to work remotely up to two days per week, depending on the role.Family - 6 months fully paid maternity leave and enhanced shared parental leave. Coaching for family leave returners and access to emergency care via My Family Care. Miscarriage and menopause policies.Wellbeing - private medical insurance, Bike2Work scheme, health and fitness subsidy, holiday exchange and an Employee Assistance Programme.Community paid volunteering leave and Give As You Earn scheme. Vibrant CSR and engagement forums and fundraising for our charity partners.Development a suite of opportunities to build the skills you need to excel in your roleIf you're excited about becoming part of our team, get in touch. We'd love to hear from you!
ICBCS has appointed Robert Walters Outsourcing (RWO) to manage its recruitment process and Preferred Supplier List (PSL). Unsolicited CVs sent directly to ICBCS or its staff from non-PSL agencies will not be accepted and no fees will be paid for such submissions.