Vice President/Chief Security Officer - Lead Controls Business Partner - Bank

VP - Lead Controls Business Partner - CSO

- This role is within the Chief Control Office (CCO) for Cyber and Information Security Risk and Controls Management.

- The primary focus of the role is to provide Governance and Execution support for Cyber, this includes identification, assessment, and provide governance support to track mitigation of risks and control issues.

- This will require the candidate to establish successful engagement with key stakeholders across all three lines of defense within the Security, as well as external stakeholders such as Internal/External Audit, and Compliance

What will you be doing?

- Serve as a technical leader in advising and assisting business verticals and horizontals for control issues and events relating to information security.

- Engage with cross-functional teams and advise on the control matters during the design and implementation of cyber projects and initiatives

- In line with the bank's priority of proactive risk management, through data-led analysis, identify the areas of potential risk and lead/contribute to risk reviews, deep dives, read across for Cyber horizontal and identify risk & control issues, collaborate with the relevant teams to help remediate the issues, in line with the policies and standards

- Influence CSO to drive and embed a controls culture whereby business stakeholders lead the controls agenda, seeking support and insight from CCO where required

- Engagement with 2LOD and BIA on Cyber related matters.

- Advise on automating and simplifying security controls, data and processes to provide improved metrics and operational support

- Stay abreast of emerging security threats and vulnerabilities and help designing the new controls and best practices into the bank's processes, tooling and techniques

- Value add in the efforts that shape the bank's security policies and standards. Help business by interpreting the business requirements and their impact to the bank's risk and controls posture and communicate control risks to relevant stakeholders ranging from business leaders to engineers/developers

- Ensure appropriate security policies and controls are in place that will safeguard bank's digital information and electronic systems.

- Assist with the development and maintenance of metrics and scorecards to enable management with decision making and intervention

- Promote awareness of applicable security policies, standards and procedures

What we're looking for :

- Lead the provision of Information and Cyber Security SME advice and guidance to key stakeholders across Barclays including upto Managing Directors and Directors

- Deep understanding of how control requirements are baked in during solution design phase of Agile development process

- Experience in either an assurance, audit or risk and control function/role

- Thorough understanding of multiple Cyber domains, this includes but not restricted to Cryptography, Network Security, Data Security

- Strong understanding of industry standards / best practices related to Security this includes but not limited to, CIS Critical Security Controls and NIST Cyber security framework

- Continuously develop information and cyber security SME capability in line with needs and expectations.

Skills that will help you in the role :

- Education: Minimum of bachelor's degree in Information Systems or Computer Science.

- Desired Certifications: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)

Where will you be working?

Noida/ Pune