This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
In a Controls role, you'll ensure rigorous and consistent management of Barclays' control environment in collaboration with business partners. Your work will safeguard the organization's integrity and compliance. To partner with the bank, to provide independent insurance on control processes and advise on improvements to ensure the efficiency and effectiveness of the bank’s internal controls framework.
Job Responsibility:
Collaboration across the bank to maintain a satisfactory, robust, and efficient control environment through the execution of ad-hoc assessments and testing on the design and operational effectiveness of the internal controls, aligned to control policies and standards
Development of detailed test plans and procedures to identify weaknesses in internal controls and other initiatives aligned to the bank’s control framework to mitigate any potential risks and issues, prioritised by its severity to disrupt bank operations, potential losses, and reputational impact
Communication of key findings and observations to the relevant stakeholders and business units to improve overall control efficiency and provide corrective actions to senior managers
Collaboration with other control professionals to resolve complex issues and ensure consistent testing methodologies across the bank
Development of a knowledge centre containing detailed documentation of control assessments, testing on design and operational effectiveness of procedures, findings, and the distribution of material on internal controls to train and upskill colleagues within the bank
Requirements:
Knowledge of key areas in cyber risk, including access management, network security, data loss prevention, secure configuration, cryptography at both application and infrastructure layers, operational and cyber recovery risk
Experience in one or more of the following fields Information Security Audit, Risk and Control, IT security
Knowledge of General Computing Controls, NIST, Cloud Frameworks, Artificial Intelligence including relevant tools and emerging technologies
Exposure to large-scale enterprise wide risk management processes and security tools for operating systems (Windows, Linux), Active Directory, Groups, SIEM, MDM, incident response)
Knowledge or IS/IT Risks & Controls and respective Standards / Frameworks (e.g. COBIT, ITIL, SOx)
Effective communication skills to engage with business stakeholders, clear documentation, strong organization skills, pro-activeness is a Must
Relevant professional certification (CISA, CISSP, CRISC, CISM, ISO 27001) or equivalent