•Understand the workstream objectives and roadmap
•Understand the control objectives and test procedures
•Identify in-scope third parties supporting in-scope IT applications or in-scope business processes, e.g. financial reporting
•Responsible for review control documentation, understand the control coverage and time period, check controls, assessing gaps
•Responsible for preparing SOX supporting documentation for each in-scope application to include details of the control coverage, risks, deficiencies
•Where required, support any remote or onsite audit of an in-scope third party
•Arrange meetings to facilitate Control testing / validation
•Involvement in subsequent QA of results as required
•Diligently provide weekly and ad hoc reporting on the status of assessments
•Maintain a register of control testing outcomes and control gaps
Business
•Manage relationships with relevant stakeholders on related projects, collaborating closely.
•Work closely with businesses and functions impacted by relevant projects to solve issues and spot opportunities as they arise.
People and Talent
•Be an example for others to follow with regard to implementation of control testing
•Maintain a positive attitude with the capability to work under pressure and deliver on multiple deadlines.
•Foster good relationships with the TTO function and third party contract managers across the bank
Risk Management
•Responsible for accurate risk reviews / identification of SOX control gaps / risks associated with in-scope applications or third party reviews
Governance
•Adhere to SCB Programme Management good practice and governance.
Regulatory & Business Conduct
•Display exemplary conduct and live by the Group’s Values and Code of Conduct.
•Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
•Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.
•Compliance with UK Companies Act and UK Corporate Governance requirements relating to internal controls
Key Stakeholders
•Head, Finance Operational Risk and Policy
•Global IT & Third Party Lead
•TTO CIO teams
•ITAC application & test stream leads
•Executive Director Third Party Controls
•Accountable Executive / Functional Lead for any related projects / workstream(s)
•UK ACG Project and Programme Managers
•Project / programme steering committee stakeholders
•Key Functions involved in related projects, which can include any combination of: Compliance, Regulatory Affairs, Finance, IT, Risk, Treasury, HR
•TTO stakeholders, including those within Risk & Controls function