23 Oct
|
Standard Chartered Bank
|
Bengaluru
23 Oct
Standard Chartered Bank
Bengaluru
This job is with Standard Chartered Bank, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.
Job Summary
This role could be based in India and Poland. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based.
Client & Third Party Security (CTPS) is a specialist team within the Bank's Group Threat Management (GTM) function, forming part of Information & Cyber Security (ICS). The team plays a critical role in delivering the Group's ICS Strategy by helping build a comprehensive, threat-focused understanding of its external ecosystem, including third party vendors, key partners, and clients. CTPS helps protect the Bank by managing third-party cyber risk end-to-end through delivery of Third Party Security Assessments, contractual control oversight, third party continuous monitoring, detection, analysis and investigation of third party incidents, and targeted remediation of third party security observations. As the threat landscape continues to evolve, CTPS is going through an exciting transformation to become more threat-led, risk-focused and effective - strengthening supply chain security capabilities and improving detection and remediation of interconnected third-party risks.
The Lead, Third Party Continuous Monitoring will be responsible for leading the Bank's third party continuous monitoring function, ensuring the proactive identification, assessment, escalation and management of cyber security alerts across the organisation's third party ecosystem. Sitting within CTPS,
the role will oversee a team of analysts responsible for monitoring external attack surface intelligence, threat signals and other risk indicators to detect emerging threats, material changes in third party security posture and potential areas of elevated third party residual risk.
The role will work closely with teams responsible for third party security assessments, incident investigations, remediation of third party control gaps, threat intelligence, Supply Chain Management and broader Third Party Risk Management stakeholders. It will ensure monitoring outputs are investigated in a timely and consistent manner, significant risks are escalated appropriately, and insights are used to inform reassessments, remediation priorities, incident response activity and wider control uplift.
The role will be accountable for maintaining a robust, intelligence-led continuous monitoring capability aligned to industry good practice, regulatory expectations and the Bank's ICS strategy. This includes driving improvements to monitoring tools, data sources, alerting logic, operating procedures, reporting and governance..
Key Responsibilities
Strategy
• Lead the development and implementation of CTPS' third party continuous monitoring maturity roadmap, aligned to the Bank's ICS strategy and the objective of building a more dynamic, intelligence-led and proactive third party security risk capability.
• Shape the future-state continuous monitoring model for the Bank's third party ecosystem, ensuring monitoring coverage is risk-based, scalable and focused on vendors that present the greatest potential exposure.
• Drive the evolution of continuous monitoring from periodic external attack surface review to a more integrated capability that informs assessments, reassessments, incident investigations, control remediation and residual risk decisions.
• Identify and implement opportunities to enhance the Bank's security posture through improved monitoring tooling, data sources, alerting, analytics, automation and intelligence-led prioritisation.
• Contribute to strategic initiatives across CTPS and TPRM that strengthen third party cyber resilience and improve the Bank's ability to detect and respond to emerging supplier risks.
Business
• Maintain awareness and understanding of the Group's business strategy, operating model, third party ecosystem, critical dependencies and wider cyber, technology, geopolitical and market environment.
• Ensure continuous monitoring outputs provide timely and actionable insight into material changes in vendor security posture, external attack surface exposure and emerging areas of third party cyber risk.
• Support business continuity by enabling earlier identification and escalation of cyber risks that may impact critical suppliers, services, markets, clients or operational resilience.
• Partner with third party security assessment, risk remediation, incident investigation, SCM and business-facing teams to ensure monitoring insights are translated into appropriate risk management actions
📌 Lead, Third Party Continuous Monitoring (Bengaluru)
🏢 Standard Chartered Bank
📍 Bengaluru