Responsibilities

- Develop and maintain a risk-based audit plan for digital assets technology in accordance with IIA Standards and the Group Internal Audit methodology. Auditing digital asset technology auditing includes operating systems involving cryptocurrencies, tokens, custody solutions, blockchain based applications, smart contracts, and wallet security.

- Perform periodic and continuous risk assessments to identify and assess key risks arising from digital assets programmes and relevant technologies, new initiatives, regulatory changes and external developments.

- Plan and perform internal audit engagements in line with IIA Standards, including defining audit objectives, scope, and criteria for digital asset technology audits.

- Obtain sufficient, reliable, relevant and useful information to provide a reasonable basis for audit conclusions, including through walkthroughs, control testing, data analysis, and interviews.

- Evaluate the design and operating effectiveness of governance, risk management and internal control processes over digital assets activities.

- Assess whether digital asset activities are conducted in line with the Group's risk appetite, internal policies and applicable laws and regulations.

- Identify and clearly document audit findings, root causes, risk implications, and control weaknesses in accordance with Group Internal Audit standards and documentation requirements.

- Communicate audit result through clear, accurate, and timely reporting to management and relevant governance forums and/or committees.

- Monitor and follow up on management actions plans to ensure effective and timely remediation of audit issues.

- Maintain independence and objectivity while providing credible and constructive challenge to management.

- Coordinate with other Group Internal Audit teams to ensure adequate coverage, avoid duplication, and support a consistent and integrated assurance approach.

- Contribute to quality assurance and improvement activities within Group Internal Audit, including methodology enhancements and peer reviews.

- Maintain up-to-date knowledge of digital asset technology risks, regulatory expectations, and industry practices to continuously enhance audit effectiveness.

Risk Management

- Complete relevant risk assessment activities in a timely and effective manner, including the completion of the Risk Assessment template.

- Assist in continuous auditing and monitoring of key risks in the portfolio.

- Utilise the risk assessment process and stakeholder engagement to determine an anticipatory audit plan.

Governance

- Continuous engagement of stakeholders and establish good working relationship to help the businesses improve the control environment.

- Escalate delays in the execution of audit work, both to business and GIA management.

- Be able to clearly explain issues, along with the risks and root causes to GIA and business management. Use language designed to be understood by non-experts

Regulatory & Business Conduct

- Display exemplary conduct and live by the Group's Values and Code of Conduct.

- Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.

- Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

Key Stakeholders

- Designated business and technology stakeholders, typically related to individual audit assignments and the assigned portfolio; and

- GIA stakeholders - team leaders, team members, team managers, Product, Functional, Country and Regional