Control Business Partner

**Job Title**:Controls Business Partner - CSO

**Location**:Pune

**About Barclays**

**Barclays is a British universal bank. We are diversified by business, by different types of customers and clients, and by geography. Our businesses include consumer banking and payments operations around the world, as well as a top-tier, full service, global corporate and investment bank, all of which are supported by our service company which provides technology, operations and functional services across the Group.**

**Risk and Control Objective**

Ensure that all activities and duties are carried out in full compliance with regulatory requirements, Enterprise Wide Risk Management Framework and internal Barclays Policies and Policy Standards.

**Working Flexibly**

We’re committed to providing a supportive and inclusive culture and environment for you to work in. This environment recognises and supports ways to balance your personal needs, alongside the professional needs of our business. Providing the opportunity for all our employees, globally to work flexibly empowers each of us to work in a way that suits our lives as well as enabling us to better service our customers’ and clients’ needs. Whether you have family commitments or you’re a carer, or whether you need study time or wish to pursue personal interests, our approach to working flexibly is designed to help you balance your life.

If you would like some flexibility then please discuss this with the hiring manager.
- This role is within the Chief Control Office (CCO) for Information Security Risk and Controls Management. The primary focus of the role is to provide Governance and Execution support for Cyber this includes identification, assessment, and provide governance support to track mitigation of risks and control issues.

**What will you be doing?**
- Support in advising and assisting business verticals and horizontals for control issues and events relating to information security
- In line with the bank’s priority of proactive risk management, through data-led analysis, identify the areas of potential risk and lead/contribute to risk reviews, deep dives, read across for Cyber horizontal and identify risk & control issues, collaborate with the relevant teams to help remediate the issues, in line with the policies and standards
- Support CSO to drive and embed a controls culture whereby business stakeholders lead the controls agenda, seeking support and insight from CCO where required
- Support effective CSO implementation of the Barclays Controls Framework (BCF), and drive ownership and delivery of identified actions
- Engage with cross-functional teams and advise on the control matters during the design and implementation of cyber projects and initiatives.
- Advise on automating security controls, data and processes to provide improved metrics and operational support
- Stay abreast of emerging security threats and vulnerabilities and help designing the new controls and best practices into the bank’s processes, tooling and techniques
- Value add in the efforts that shape the bank’s security policies and standards Help business by interpreting the business requirements and their impact to the bank’s risk and controls posture and communicate control risks to relevant stakeholders ranging from business leaders to engineers/developers
- Ensure appropriate security policies and controls are in place that will safeguard bank’s digital information and electronic systems.
- Assist with the development and maintenance of metrics and scorecards to enable management with decision making and intervention
- Promote awareness of applicable security policies, standards and procedures

**What we’re looking for**:

- Provide Information and Cyber Security SME advice and guidance to key stakeholders across Barclays
- Thorough understanding of multiple Cyber domains, this includes but not restricted to Cryptography, Network Security, Data Security
- Strong understanding of industry standards / best practices related to Security this includes but not limited to, CIS Critical Security Controls and NIST Cyber security framework
- Good awareness of key security knowledge domains and how control requirements are baked in during solution design phase of Agile development process
- Experience in either an assurance, audit or risk and control function/role, preferred
- Continuously develop information and cyber security SME capability in line with needs and expectations

**Skills that will help you in the role**:

- Education: Minimum of bachelor’s degree in Information Systems or Computer Science.
- Preferred Certifications: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)

**Where will you be working?**

Pune

**Be More at Barclays**

Interested and want to know more about Barclays? Visit home.barclays/who-we-are/ for more details.

**Our Values**

**Purpo