Technology Assurance

Job Title : Technology Assurance
Location: Pune

About Barclays
Barclays is a British universal bank. We are diversified by business, by different types of customers and clients, and by geography. Our businesses include consumer banking and payments operations around the world, as well as a top-tier, full service, global corporate and investment bank, all of which are supported by our service company which provides technology, operations and functional services across the Group.

Risk and Control Objective

Take ownership for managing risk and strengthening controls in relation to the work you do

Working Flexibly

Hybrid Working

Structured hybrid role:
Introduction:

- Provide assurance to Technology Leadership regarding the design and operating effectiveness of the Technology control environment in mitigating relevant risks through a defined and agreed programme of testing activity for Barclays.
- Review activities to remediate control gaps and assess whether the risk has been fully mitigated and whether the implemented controls are sustainable for Barclays.
- Identify, evaluate, report and escalate risks in line with Barclays risk and control frameworks, utilising relevant tools and analytical techniques.
- Provide guidance to ensure compliance with Barclays Group and Technology Policies, Standards, frameworks and procedures across Business Units, Functions and Shared Services.
- Report the results of testing activities to Senior Stakeholders across Business Units, Functions and Shared Services.
- Influence and support the implementation of the Technology CCO strategy.
- Meet the needs of key internal and external risk processes, reporting schedules, stakeholders and regulatory authorities in delivering assurance activities.

What will you be doing?
- Ensure quality and accuracy of control testing by performing internal quality assurance (QA) verification as per Barclays Control Framework
- Liaise with stakeholders across the three Lines of Defence to ensure efforts are aligned and complementary
- Review activities undertaken by management to remediate control gaps and provide an opinion as to whether the risk has been fully mitigated and whether the implemented controls are sustainable.
- Identify and leverage appropriate data sources and data analytical techniques to deliver targeted testing
- Extend the support towards implementation of the Technology CCO strategy to drive global consistency and improvements in risk awareness and risk management capability by developing a close and trusted relationship with key stakeholders, wherever required.
- Maintain an independent perspective, challenging as required and setting out quantified control options and risk decision recommendations.

What we’re looking for:
Cyber Information Security Controls testing:

- 5-10 years of senior testing experience of Cyber/ Technology / Application Controls / Operational Resilience
- Significant hands on experience in technology / cyber technologies and products, IS Audits / IT Assessments and GRC (Governance, Risk & Controls) and in-depth knowledge of the audit lifecycle process
- Very strong stakeholder management and interpersonal skills, and ability to influence and manage global stakeholder relationships, ranging from non-technical to highly technical.
- Ability to assess and manage scope change controls, and adapt / lead testing of new technologies
- Analytical approach and proven ability to manage issues through to resolution
- Strong interpersonal skills and Team player who can communicate and deliver as part of a global matrix team
- Understanding of Software development, and software / code testing approaches and methodologies.
- Honors degree in computers science. Professional Certification like CISSP will be an added advantage

Skills that will help you in the role:

- Extensive knowledge of Cyber, Information and Technology risk and control including relevant tools and techniques
- Relevant Professional certification (CISA, CISSP, CRISC, CISM, ISO 27001) or equivalent.

This role requires extensive knowledge and working experience in Technology, Information, and Security domain.
- Knowledge of IT architecture, networks, operating systems and database security, Active Directory, Cloud, Resiliency, SIEM tools
- Knowledge or IS/IT Risks & Controls and respective Standards / Frameworks (e.g. COBIT, ITIL)
- Practical experience in managing Technology Risks & Controls in Financial Services organisations
- OSCP qualification or similar
- CSTE qualification or similar

Where will you be working?
Pune

Be More at Barclays
Interested and want to know more about Barclays? Visit home.barclays/who-we-are/ for more details.

Purpose, Values and Mindset
We deploy finance responsibly to support people and businesses, acting with empathy and integrity, championing innovation and sustainability, for the common good and the long term.

Our values underpin everything we do: Respect, Integrity, Service, Excellence and Stewards