cyber controls assurance

Job Description

Introduction:

• Provide assurance to Technology Leadership regarding the design and operating effectiveness of the Technology control environment in mitigating relevant risks through a defined and agreed programme of testing activity for Barclays.
• Review activities to remediate control gaps and assess whether the risk has been fully mitigated and whether the implemented controls are sustainable for Barclays.
• Identify, evaluate, report and escalate risks in line with Barclays risk and control frameworks, utilising relevant tools and analytical techniques.
• Provide guidance to ensure compliance with Barclays Group and Technology Policies, Standards, frameworks and procedures across Business Units, Functions and Shared Services.
• Report the results of testing activities to Senior Stakeholders across Business Units, Functions and Shared Services.
• Influence and support the implementation of the Technology CCO strategy.
• Meet the needs of key internal and external risk processes, reporting schedules, stakeholders and regulatory authorities in delivering assurance activities.

What will you be doing

• As a member of Cyber Controls Assurance team the primary responsibility is to carry out control testing for Chief Security Office Horizontal Controls Assurance
• Carry out annual controls testing for General Computer Controls (GCC) and Automated Business Controls (ABC) with the good understanding of assessment frameworks and the applications
• As a Control Testing team member from Cyber Assurance team you will be fungible to support all 3 Technology Control Testing portfolios (Cyber, GCC and ABC Portfolio) e.g. 60 % on Cyber and 40% GCC and/or ABC portfolio in a particular year
• Ensure quality and accuracy of control testing by performing internal quality assurance (QA) verification as per Barclays Control Framework
• Liaise with stakeholders across the three Lines of Defence to ensure efforts are aligned and complementary
• Ensuring that all controls assurance activity is appropriately documented and repeatable with results logged, communicated, tracked and reported
• Review activities undertaken by management to remediate control gaps and provide an opinion as to whether the risk has been fully mitigated and whether the implemented controls are sustainable.
• Identify and leverage appropriate data sources and data analytical techniques to deliver targeted testing
• Extend the support towards implementation of the Technology CCO strategy to drive global consistency and improvements in risk awareness and risk management capability by developing a close and trusted relationship with key stakeholders, wherever required.
• Maintain an independent perspective, challenging as required and setting out quantified control options and risk decision recommendations.

What we re looking for:

• Responsible for the preparation of project documentation throughout the project lifecycle, which also includes the business case
• Ability to assess and manage scope change controls
• Can manage the trade-offs of delivery within time, cost, and quality constraints
• Proactively identifies risks, issues/Gaps in control testing and can perform analysis on value at risk and mitigation options across a project
• Hands on experience into IS Audits / IT Assessments and GRC (Governance, Risk & Controls)
• Analytical approach and proven ability to manage issues through to resolution
• Strong interpersonal skills and ability to communicate effectively across a global team
• Ability to successfully multitask and complete assignments with varying lead times
• Self-starter & works independently

Essential Skills/Basic Qualifications:

• Knowledge and experience on IT Auditing/Control testing, IT Information Security, IT Generic Computing Controls
• Knowledge of technology risk and control including relevant tools and techniques
• Knowledge of key areas in technology risk, including operations, change, security, resilience at both application and infrastructure layers.

Skills that will help you in the role:This role requires extensive knowledge and working experience in Technology, Information, and Security domain.

• Knowledge or experience of Cyber and Information Security
• Knowledge or experience of Network security
• Knowledge or experience of Cloud Security
• Basic understanding of programming/ database languages viz. C++, Java, COBOL, SQL
• Basic understanding of Data Analytics would be an advantage
• Knowledge or IS/IT Risks & Controls and respective Standards / Frameworks (e.g. COBIT, ITIL)
• Practical experience in managing Technology Risks & Controls in Banking/ NBFC domains
• Practical experience in design and development of SharePoint or similar tools

Where will you be working PuneBe More at BarclaysAt Barclays, each day is about being more as a professional, and as a person. Be More @ Barclays represents our core promise to all current and future employees. It s the characteristic that we want to be associated with as an employer, and at the heart of every employee experience. We empower our colleagues to Be More Globally Connected, working on international projects that improve the way millions of customers handle their finances. Be More Inspired by working alongside the most talented people in the industry, and delivering imaginative new solutions that are redefining the future of finance. Be More Impactful by having the opportunity to work on cutting-edge projects, and Be More Valued for who you are.Interested and want to know more about Barclays Visit home.barclays/who-we-are/ for more details.Purpose, Values and MindsetWe deploy finance responsibly to support people and businesses, acting with empathy and integrity, championing innovation and sustainability, for the common good and the long term.Our values underpin everything we do: Respect, Integrity, Service, Excellence and Stewardship.RespectWe harness the power of diversity and inclusion in our business, trust those we work with, and value everyones contribution.IntegrityWe operate with honesty, transparency and fairness in all we do.ServiceWe act with empathy and humility, putting the people and businesses we serve at the centre of what we do.ExcellenceWe champion innovation, and use our energy, expertise and resources to make a positive difference.StewardshipWe prize sustainability, and are passionate about leaving things better than we found them.Our Mindset shapes how we take action, living by our Values, driven by our Purpose, always with our customers and clients at the heart of what we do; our Mindset is to Empower, Challenge and Drive.EmpowerTrust and support each other to deliver. Make decisions with those closest to the topic. Include diverse perspectives. Celebrate success and learn from failure.ChallengeQuestion whether things can be done better. Use insights based on data to inform decisions. Be curious about how we can adapt and improve. Speak up and be open to alternative viewpoints.DriveFocus on outcomes. Deliver with pace. Be passionate and ambitious about what we do. Take personal responsibility. Actively build collaborative relationships to get things done.,

Keyskills :
value at riskrisk management frameworkenvironmental impact assessmentmusic makingdata analyticscloud securitybusiness unitsrisk managementcontrol testingtechnology riskconsumer banking