Analyst, Risk Management - AI (Malaysia/India)

Job Summary

This role could be based in Malaysia or India. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based.

•    The role is responsible for supporting, coordinating, and strengthening the Bank’s control environment for AI-amplified risks across key risk domains, including Technology, Cyber, Data & Privacy, Compliance & Conduct, Operational Risk, and Third-Party & Concentration Risk. The objective is to ensure that AI-enabled products, platforms, processes, tools, and ways of working are assessed, governed, monitored, and controlled in line with the Bank’s risk appetite, Group policies and standards, applicable AI requirements, regulatory expectations and external obligations.
•    The role operates as a key member of the Risk Management - AI function within the Technology and Operations (T&O) division and works in close partnership with stakeholders across existing risk domains, First Line process and control owners, and central AI Governance teams. The role is focused on ensuring AI risk considerations are embedded into existing risk management processes and control environments and is accountable for driving execution across assigned domains. This includes supporting maintaining trackers, coordinating workstream activities, preparing governance materials, collecting evidence, supporting control gap analysis, maintaining issue and action logs, assisting with RCSA readiness, supporting MI / KRI / KPI production, and coordinating information required for audit, assurance, regulatory, and RFI responses.
•    The role is expected to support the mobilisation and embedding of sustainable AI risk management practices into BAU. This includes helping domain teams understand AI-amplified risks, translating AI-related control requirements into practical operating processes, supporting governance and reporting, and driving continuous improvement of the control environment as the Bank’s use of AI evolves.

Key Responsibilities

•    This role is involved in supporting the execution of the Bank’s AI-amplified risk management agenda and assisting with the coordination of activities across existing risk domains impacted by AI. Reporting to the Lead, Risk Management - AI, the primary roles is focused on:
        •    Supporting AI-amplified risk discovery, baselines assessment, control gap analysis, control uplift tracking, and BAU monitoring activities.
        •    Assisting domain teams in documenting AI-related risk impacts, controls, actions, issues, dependencies, and evidence.
        •    Supporting governance routines, workstream coordination, progress reporting, and committee material preparation.
        •    Maintaining accurate trackers, logs, repositories, management information, and evidence packs for AI risk activities.
        •    Supporting RCSA, control testing, assurance, audit, regulatory, and RFI related activities relating to AI-amplified risks.
        •    Helping ensure that AI-related risk information is complete, consistent, timely, and escalated where required.
Processes
•    Embed AI-amplified risk considerations into existing domain processes, standards, and control routines.
•    Assess were AI adoption changes processes and relevant control expectations, ownership, evidence, or escalation requirements.
•    Support process owners in uplifting controls, and procedures for AI-impacted activities
•    Coordinate dependencies between AI Governance, Technology, Cyber, Data, Compliance, and Third-Party risk teams.
•    Track delivery of agreed process and control uplift actions

Risk Management
•    Identify, assess, and challenge AI-amplified risks across existing risk domains.
•    Support materiality assessments, control gap reviews, and residual risk assessments for AI-impacted processes, tools, platforms, vendors, and use cases.
•    Provide clear risk opinions and recommendations to support control uplift, risk acceptance, remediation, and escalation decisions.
•    Monitor AI-related issues, control gaps, incidents, risk acceptances, and management actions.
•    Support integration of AI-amplified risks into RCSA, control testing, MI, KRIs, KCIs, and BAU risk reporting.
Governance 
•    Manage AI risk workstreams and ensure delivery remains aligned to agreed scope, timelines, and governance expectations in partnership with central AI Risk governance teams.
•    Prepare governance updates, executive summaries, committee materials, and decision papers on AI-amplified risk topics.
•    Escalate material risks, blockers, dependencies, and unresolved control gaps through appropriate governance forums.
•    Support clear ownership across domain teams, control owners, AI governance, and Risk Management.
•    Maintain auditable records of key decisions, actions, issues, and escalations.
Regulatory & Business Conduct 
•    Ensure activities are aligned to Group policies, AI standards, regulatory expectations, and applicable conduct requirements.
•    Support mapping of AI-amplified risks to relevant regulatory, policy, and control obligations.
•    Promote responsible AI adoption by escalating risks of unfair, inappropriate, opaque, or poorly controlled outcomes.
•    Support audit, assurance, regulatory, and RFI responses relating to AI-amplified risks.
•    Display exemplary conduct and uphold the Group’s Values, Code of Conduct, and risk management standards.

Key Stakeholders
•    AI Leadership Team
•    T&O Management Team
•    Central AI Governance and AI Enablement Teams
•    2nd Line of Defence functions
•    Governance & Optimisation teams
•    Group Internal Audit
•    T&O Risk Management Teams 
•    T&O Technology Process Owners
•    Regulators and their appointed auditors (where applicable)
Other Responsibilities
•    Support ad-hoc tactical and strategic risk initiatives to meet business and operational demands through thoughtful partnership.

Skills and Experience

•    Experience in AI Risk Management within a large, regulated financial services environment.
•    Preferably experience in one or more of the following risk domains within a large, regulated, financial services environment: Technology, Cyber, Compliance, Conduct, Data, and Third Party
•    Strong understanding of technology control environments (people, process, and technology) and their application within software engineering and technology delivery domains.
•    Experience conducting or supporting deep‑dive risk reviews of emerging technologies, new platforms, or material technology changes.
•    Ability to provide clear, defensible risk opinions and effective challenge to senior stakeholders across Technology & Operations, and Risk Management functions.
•    Strong written and verbal communication skills, with the ability to produce concise, high‑quality risk documentation suitable for audit, regulatory, and governance review.
•    Strong analytical skills, detail-focused with the ability to interpret large volume of information.
•    Problem solving skills with ability to influence across all levels of business.
•    Ability to independently drive initiatives with minimum hands-on supervision.

•    AI Risk
•    Technology Risk 
•    Cybersecurity Risk
•    Compliance Risk
•    Risk and Control Self-Assessment (RCSA)
•    IT Standards, Procedures & Policies
•    Controls Design and Assessment
•    Process Improvement
•    IT Audit and Control

Qualifications

•    Bachelor’s degree or equivalent in Engineering, Computer Science, Information Technology, Risk Management, or a related discipline.
•    Post‑graduate qualification (e.g. MBA, PGDM, M.Tech, or equivalent) is preferred but not mandatory.
•    Relevant professional certifications in Technology Risk, Information Security, Audit, or Risk Management (e.g. CISA, CRISC, CISSP or equivalent) are desirable.
•    Ideally 5+ years of experience in banking, analytical or another relevant environment
•    Languages: English and/or local language skills as relevant to country requirements

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.