Ba4 Global Supplier Assurance

**Job Title**:BA4, Global Supplier Assurance

**Location**:Pune

**About Barclays**

**Barclays is a British universal bank. We are diversified by business, by different types of customers and clients, and by geography. Our businesses include consumer banking and payments operations around the world, as well as a top-tier, full service, global corporate and investment bank, all of which are supported by our service company which provides technology, operations and functional services across the Group.**

**Risk and Control Objective**

Ensure that all activities and duties are carried out in full compliance with regulatory requirements, Enterprise Wide Risk Management Framework and internal Barclays Policies and Policy Standards.

**Working Flexibly**

We’re committed to providing a supportive and inclusive culture and environment for you to work in. This environment recognises and supports ways to balance your personal needs, alongside the professional needs of our business. Providing the opportunity for all our employees, globally to work flexibly empowers each of us to work in a way that suits our lives as well as enabling us to better service our customers’ and clients’ needs. Whether you have family commitments or you’re a carer, or whether you need study time or wish to pursue personal interests, our approach to working flexibly is designed to help you balance your life.

If you would like some flexibility then please discuss this with the hiring manager.
- This role is accountable for ensuring the Bank has appropriate visibility, transparency and insight into the operational risks it is exposed to relating to Supplier Risk and the measures required to mitigate them. This accountability will be executed through the implementation of independent, evidence-based assurance of Supplier Risk across the region. This accountability will be executed through the reviewing of implementation of technology platforms which are operated by supplier, in Third Party domain.

**What will you be doing?**
- Deliver all supplier assurance services in line with relevant policies, standards and target operating model Identify areas of control weakness or strength for suppliers, driving proactive remediation and action Support and advise the business in developing remediation plans for control weakness
- Support the Chief Security Office (CSO) function with a Programme management service for delivery of supplier assurance programmers within CSO
- Produce timely and accurate management information in support of the governance and operating model of CSO.
- Stakeholder management and leadership. Experience building relationships with internal customers - BU and CCO Customers - as well as externally if required.
- Proven ability to operate in a matrix organisation
- Decision making and problem solving.
- Track, review and report on the management of Supplier risk across the regions
- Analyses of data in aggregate to identify trends and indicators of thematic issues
- Focus on aligning supplier assurance scoping with the business unit and operations the supplier is supporting to proactively identify inherent risk and provide solutions to remediate

**What we’re looking for**:

- 8+ years of experience with technology operations, functions, controls and emerging trends at a strategic level
- Professional risk management qualifications and certifications desirable
- Good understanding of risk management frameworks and compliance activities
- Lead IT/Cyber security audit, due diligence/risk assessment in relation to 3rd party supplier’s sites and partner organisations, including the identification of security controls and assessing their effectiveness.
- A demonstrated understanding of Internet protocols, network architecture, appliances, and knowledge of network security technologies
- Working knowledge of the cyber security threats, countermeasures and practices related to cloud technologies.
- Ability to understand and communicate risk posture, possible impact on business functions, and paths for remediation
- Skill in testing cyber security controls against control framework

**Skills that will help you in the role**:

- Advance knowledge of MS Office Suite - Includes the MS Access, MS Visio, MS PowerPoint, MS Outlook and
- Must have skills of producing data analysis artifacts to interpret and design data along with documentation
- Good understanding of Information security standards such as ISO 27001/2, ISO 22301, PCI-DSS and knowledge of regulations such as MAS, HKMA, etc.

**Where will you be working?**

Pune

**Be More at Barclays**

Interested and want to know more about Barclays? Visit home.barclays/who-we-are/ for more details.

**Our Values**

**Purpose, Values and Mindset**

We deploy finance responsibly to support people and businesses, acting with empathy and integrity, championing innovation and sustainability, for the common good and the long term.

Our values underpin everything we do: Respect, Integri