Third Party Security Consultant

Join us as a Third Party Security Consultant at Barclays, where you'll spearhead the evolution of our digital landscape, driving innovation and excellence. You'll harness cutting-edge technology to revolutionize our digital offerings, ensuring unapparelled customer experiences.

To be a successful "Third Party Security Consultant ", you should have experience with (Mandatory)

• Experience in third-party risk management, cybersecurity, or information security.
• Experience in conducting risk assessments, control testing or assurance activities, preferably within ISO27001 or comparable frameworks.
• Exceptional communication and stakeholder management abilities.
• Strong analytical skills, with the capacity to interpret and present complex information effectively.

Some other highly valued skills may include (Mandatory):

• Security Assessment /Cyber Security Audit
• Knowledge of ISO 27001, NIST CSF, CIS Controls, SOC 2
• Experience in Implementing Third-Party Risk Management (TPRM) Security programmes
• Understanding of Risk governance, identifying risks, assessing controls, responding and remediating, assurance activity

Desirable skills/Preferred Qualifications (Not mandatory):

• CISSP, CISA, CISM, CRISC,
• ISO27001 Security Lead Implementer/Auditor,
• ISO22301 Resilience Lead Implementer/Auditor

Location: Pune.

Purpose of the role

To assess and manage the security risks associated with third-party vendors by ensuring that products and services meet agreed standards, whilst considering the risk position of third parties and their inherent risk.

Accountabilities

• Execution of risk assessments and security audits of third-party providers to assess their security posture, compliance with regulatory requirements and incident history, and communicate key findings to the relevant stakeholders.
• Identification of emerging security threats, attach techniques and third party vendor security best practice by collaborating at industry events and training programmes to share knowledge and expertise.
• Management of vendor onboarding/offboarding processes, including security and technology assessments, contractual negotiation procedures and risk mitigation measures, considering security policies, technical controls and procurement.
• Coordinate with third-party vendors to foster collaboration, promote security best practice, address security incidents and share incident information.

Assistant Vice President Expectations

• To advise and influence decision making, contribute to policy development and take responsibility for operational effectiveness. Collaborate closely with other functions/ business divisions.
• Lead a team performing complex tasks, using well developed professional knowledge and skills to deliver on work that impacts the whole business function. Set objectives and coach employees in pursuit of those objectives, appraisal of performance relative to objectives and determination of reward outcomes
• If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L – Listen and be authentic, E – Energise and inspire, A – Align across the enterprise, D – Develop others.
• OR for an individual contributor, they will lead collaborative assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will identify new directions for assignments and/ or projects, identifying a combination of cross functional methodologies or practices to meet required outcomes.
• Consult on complex issues; providing advice to People Leaders to support the resolution of escalated issues.
• Identify ways to mitigate risk and developing new policies/procedures in support of the control and governance agenda.
• Take ownership for managing risk and strengthening controls in relation to the work done.
• Perform work that is closely related to that of other areas, which requires understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function.
• Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategy.
• Engage in complex analysis of data from multiple sources of information, internal and external sources such as procedures and practises (in other areas, teams, companies, solve problems creatively and effectively.
• Communicate complex information. 'Complex' information could include sensitive information or information that is difficult to communicate because of its content or its audience.
• Influence or convince stakeholders to achieve outcomes.

All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.