Job Summary
- The 'Data Management and Privacy Operations' team is '1st line' centre of excellence under Group Chief Data Office. The role will support the respective businesses and functions assigned & work closely with the 2nd line compliance and the Information Cyber Security (ICS) & Risk assurance teams for Data Management & Privacy Operations. The role will ensure BAU is managed effectively by managing the respective business objectives in this area. The role will also provide timely feedback / data to all stakeholders to meet any key regulatory obligations and key business priorities.
- The successful candidate will have an opportunity to work in a multi-disciplinary team aimed to operate data, records and privacy controls to mitigate risks. Responsibilities include but are not limited to, data and privacy risk assessments, awareness and training, verification that proper risk assessments have been completed and up to date for vendors handling personal data, and verify applicable vendor agreements include required privacy and data protection terms according to global policy, client requirements and applicable privacy law.
- This is a hands-on, individual contributor role, working very closely with Business & Functions group and with a team of other data management & privacy experts who provide subject matter expertise and advice, tailored to the businesses, regions and functions of the Bank.
Key Responsibilities
Responsibilities include but are not limited to :
Conduct assessments / surveys (e.g. on privacy impact / risk & controls) / data gathering and analysis on applications, products, processes, documentation and third parties to evaluate compliance with laws, regulations, and internal standardsVerification that proper risk assessments have been completed and up to date for Third Parties handling Personal DataSupport Business & Functions to support them in submitting Data & Privacy Form by explaining the Data Privacy questionnaireVerify if privacy and data protection terms if applicable is included in the Third Party agreements according to global policy, client requirements and applicable privacy law.Draft / update procedures and documentation as required based on external or internal changesStrategy
Drive change and adoption including, but not limited to, creating communications (e.g. launch campaigns), training materials as well as delivery of traininBusiness
Develop, track & analyse actionable metrics to continuously improve tools, procedures & provide visibility of operations to management.Processes
Manage operational processes which delivers outcome focused & timely service deliveryAnalyse existing business & functional processes to identify automation opportunities in area of data management and data privacyRecommend process improvements to address control gaps and to enhance efficiency where possibleSupport & coordinate with stakeholders in defining automation or remediation actions / solutions.Processes
Manage operational processes which delivers outcome focused & timely service deliveryAnalyse existing business & functional processes to identify automation opportunities in area of data management and data privacyRecommend process improvements to address control gaps and to enhance efficiency where possibleSupport & coordinate with stakeholders in defining automation or remediation actions / solutionsPeople & Talent
Increase awareness of Data & Privacy risk and processes within the assigned Business / Functions by supporting training programs, maintaining and uplifting supporting procedures and materialsEnsure training needs of Business / Functions are shared with the Training Lead in the Programme and help to support / design appropriate training delivery accordinglGovernance
Support liaison with Risk Assurance team on any Group Internal Audit and any regulatory inspections as requiredAssist in identifying, assessing, monitoring, controlling and mitigating data management and privacy risks to the GroupAdopt a proactive approach to threat risk assessment through appropriate stakeholder engagement and monitoring of the external environment to improve assurance planningDefine metrics and dashboards for monitoring and reporting purposesProvide write ups and data visualisations to forums to enable decision makingParticipate in related workshops / forums to provide input on privacy processes and requirements for new products / initiativesEnsure compliance with privacy processes to deliver swift resolution of privacy related issues and incidentsReport on relevant privacy process related matters, including metrics, KRIs, issues, incidents and risksProvide timely and accurate reporting to internal risk assurance team & appropriate forums / committeesRegulatory & Business Conduct
Display exemplary conduct and live by the Group's Values and Code of Conduct.Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.Lead to achieve the outcomes set out in the Bank's Conduct PrinciplesEffectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.Serve as a Director of the BoardExercise authorities delegated by the Board of Directors and act in accordance with Articles of AssociatioKey stakeholders
Group COO - Trust, Data, and AutomationHead – Data Management & PrivacyCOO - various Business and FunctionsChief Data Protection OfficerHead of Operations - AutomationHead – ICS, Business & FunctionsGlobal Head of Assurance – Cyber, Data & Automation2nd line Risk & ComplianceChief Information Security OfficerSkills And Experience
Experience in a Data & Privacy domain of a large organisationExperience in one of the following Business / Functions will be an added advantage (e.g. Retail Banking; Corporate & Institutional Banking; Wealth Management; Private Banking; Legal; HR; Operations; Risk)Effective oral and written communication skills, with an ability to influence and to gain the respect of senior stakeholders and peersConfident and courageous to raise / escalate issues in a pro-active, professional, and timely mannerHighly motivated individual with a strong track record of achievementA good team playerAbility to multi-task and work under tight deadlinesExcellent stakeholder management skillsQualifications
Education : University DegreeCertifications : Certification (Such As Cippe, Cia, Cisa, Cissp, Or Cism) PreferredRole Specific Technical Competencies
Good understanding of Information Security Policy, Privacy Policy, Data Management Framework & Standards.About Standard Chartered
We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.
Together We
Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we doNever settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so wellAre better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long termWhat We Offer
In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.Time-off including annual leave, parental / maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.Flexible working options based around home and office locations, with flexible working patterns.Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkitsA continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.Skills Required
Risk Assessment, Information Security Policy, Stakeholder Management, Data Privacy