Director CCO - BBplc Technology Control

About Barclays

Barclays is a British universal bank. We are diversified by business, by different types of customers and clients, and by geography. Our businesses include consumer banking and payments operations around the world, as well as a top-tier, full service, global corporate and investment bank, all of which are supported by our service company which provides technology, operations and functional services across the Group.

We are an equal opportunity employer and we are opposed to discrimination on any grounds.

Working Flexibly

We’re committed to providing a supportive and inclusive culture and environment for you to work in. This environment recognises and supports ways to balance your personal needs, alongside the professional needs of our business. Providing the opportunity for all our employees, globally to work flexibly empowers each of us to work in a way that suits our lives as well as enabling us to better service our customers’ and clients’ needs. Whether you have family commitments or you’re a career, or whether you need study time or wish to pursue personal interests, our approach to working flexibly is designed to help you balance your life.  If you would like some flexibility, then please discuss this with the hiring manager, and your request will be reviewed subject to business needs.

Hybrid Working

About Chief Controls Office

The Chief Controls Office (CCO) is a function within the Chief Operating Office (COO) that operates across the bank (Barclays UK (BUK), Barclays Bank Plc (BBPLC) and Barclays Execution (BX) Services) to strengthen the control environment by driving consistent, excellent performance against the Control agenda.  The team is an integral part of Barclays’ increasing emphasis on sustaining and strengthening an effective control framework, to meet our business needs, meet regulatory requirements and also to deliver upon our core values and commitments to all of our customers, clients and shareholders.

The purpose of the Chief Controls Office is to improve the Control Environment. We do this by defining and executing strong controls processes and offering effective control management tools and reporting.  Control Business Partners directly partner with key stakeholders in the business as well as other BX services to provide an expert advisory service on a range of control related matters that support the assessment and management of risk across the businesses.

Please visit our websiteherefor more information.

About Barclays Execution (BX) Services Chief Control Office

Partner with the business providing controls-related subject matter expertise, helping them comply with requirements under the Barclays Control Framework (BCF) in a sustainable manner, achieving compliance now, and importantly through their strategic plans.

This includes Barclays Operations & Technology, Legal, HR and the Chief Data Office.

Overall Purpose of Role

As a Barclays Control Business Partner you will be the first line of defence responsible for ensuring effective governance is maintained across key customer processes and underpinning controls, to strengthen the control environment. The primary focus will be on maintaining regulatory compliance across the Technology and Chief Security Office (cyber and resilience) domains across APAC. In conjunction the role holder will be expected to work collaboratively across the leadership team acting in a Controls Advisory position to the business.  

• The role aligns to the Chief Control Office partnering Barclays Execution Service, and the role holder will partner senior executives across Technology and the Chief Security Office across APAC
• The role holder will be responsible for supporting APAC regional CIOs (Chief Information Officers) in maintaining compliance with regulatory requirements pertaining to both Technology and Cyber. 
• This will include ensuring Barclays Policy and Standards meet regulatory requirements, both now and on an ongoing basis through Horizon Scanning.
• Maintaining a list of regulatory requirements, managing regulatory  submissions, interfacing with the regulators and supporting CIOs with any regulatory exams.
• The role holder will also be responsible for providing controls advisory to the APAC regional CIOs and CISO`s in respect to the Barclays Enterprise Risk Management Framework and its related policy and standards regarding Barclays Control Framework, Technology standards and regulatory commitments.
• This will require the successful candidate to establish engagement with key stakeholders within

Technology, Chief Security Office, Global CCO partners, Operational Risk, Internal Audit, External Audit and Regulators.

• The role will also lead the analysis of emerging technology and outsourcing risk areas like cloud computing in order to align Barclays polices, standards and controls to address new requirements

Key Accountabilities

• Understand the regulatory compliance requirements and support the regional CIOs / CISO`s in complying with those requirements by:

• Maintaining a registry of regulatory requirements across the APAC business units that need to be complied with in alignment to the  Barclays control framework.
• Horizon scanning for emerging external risk factors in anticipation regulatory changes, in order to develop programs for strengthening the internal control environment in a proactive manner.
• Collating, reviewing and submitting periodic and ad-hoc regulatory submissions.
• Conduct periodic risk assessments for specific regional or country technology / CSO environments
• Assisting the business in the design and embedment of local country specific controls to maintain compliance to Barclays Standards working in conjunction with the Designing and establishing local country specific controls where necessary.

• Oversight and advise on technology/CSO risk identification, risk assessment, risk mitigation and response and risk reporting across the relevant transaction cycles within Barclays International to operate within risk appetite and in compliance with Barclays Control Framework.
• Assessing  IT and Cyber related internal issues to regulatory impact , liaising in an advisory capacity to senior stakeholders  and effectively communicate these risks to business stakeholders
• Engender effective business relationships with key senior stakeholders, across the business and all 3 Lines of Defense.
• Provide board level updates supporting the governance and reporting requirements across Barclays Group, including the various Legal Entities that it spans. 
• Establish and manage successful engagements with key stakeholders external to Barclays, for example the Monetary Association Singapore (MAS), actively ensuring compliance to external commitments.
• Provide subject matter expertise for senior management on all aspects of technology and cyber risk.
• Chair/lead key project meetings, including executive committees, steering committees and working groups
• Provide oversight of the implementation of strategic and regulatory change programmes, ensuring that appropriate processes have been followed by the projects on behalf of the business in order that regulatory requirements will be met through effective control frameworks. 
• Provide strong and supportive leadership to a team of up to 10 colleagues, over a wide geographic footprint aligned to Barclays Values and Mindset.

Stakeholder Management and Leadership

Excellent interpersonal and stakeholder management skills; being able to communicate confidently

and effectively with people at all levels, both verbally and in writing.  Engagement with stakeholders and be actively able to manage conflicting views.  To develop and maintain excellent working relationships across multiple teams.

Decision-making and Problem Solving

Navigating complex, often matrix-based environment to make decisions and propose solutions on long standing or emerging control issues to influence stakeholders on the remediation required.  Able to overlay policy and standard requirements with business needs to support the business with solutions for complex risk and control issues.  To be able to look at the bigger picture and take a balanced risk approach.

Risk and Control Objective

Ensure that all activities and duties are carried out in full compliance with regulatory requirements, Enterprise Wide Risk Management Framework and internal Barclays Policies and Policy Standards.

Leadership

Ability to inspire others through leading by example, building strong relationships, motivating and empowering people based on practical experience.  Leading on the growth of control culture in all our interactions with senior stakeholders, colleagues and teams.

Person Specification

• Curious and inquisitive mind
• Data driven, able to synthesise recommendations from large and varied sources of data
• A high degree of decision-making authority, and needs to demonstrate ability to influence upwards
• Innovative thought-leader to ensure that processes under review are operating in an industry-leading way.
• Autonomous and able to influence & deliver in a matrix organisation
• Operate effectively in a cross channel environment to drive synergies in the control mechanisms to identify and take forward opportunities to continuously improve these
• Organised with the ability to prioritise and work under pressure, delivering to tight deadlines and multiple demands
• Collaborative and able to share best practice at all levels

Essential Skills/Basic Qualifications

• Multi lingual across APAC region
• Bachelor’s degree or equivalent work experience.
• 15+ years’ experience in relevant industry with strong background in technology risk management, of which at least 10 years’ in related management roles
• Experience in assessing design and operating effectiveness of technology controls
• Experience of a project environment, in particular planning, testing, and tracking against a plan
• Impeccable problem-solving and communication skills, including experience presenting to senior level leadership
• Experience in leveraging IT risk frameworks such as COBIT5, COSO, NIST and/or data management frameworks DCAMM/CMM-DMM
• Excellent knowledge of information technology risks, controls and risk remediation and experience using industry wide GRC tools (e.g Archer, Metricstream)
• Strong analytical skills with a technical background
• Sound experience in data analysis, validation and presentation of results
• 10+ years of experience one or more of the following:
  • Performing Risk and Control Self Assessments (RCSA), Technology Control Self-Assessment (TCSA), Audit or Assurance work
  • Developing and enhancing control frameworks
  • Assisting in responding to regulatory inquiries and questionnaires

• • Enterprise Risk Management practices, internal control, fraud deterrence frameworks
  • Providing Risk and Control expertise to legal entities

Desirable skills/Preferred Qualifications

• 10 years of experience in playing a lead role in:
  • Co-coordinating IT efforts during internal/external audit and regulatory reviews
  • Review of Audit reports, including alignment of findings with operational risk, and regulatory requirements and Barclay’s Control Framework
  • Advising IT on pragmatic approaches to meeting regulatory mandated technology controls and risk reduction
  • Delivering of risk reduction and operational improvement projects
  • Managing divers staff and stakeholders
• Advance degree in Math, Computer Science
• Experience in the emerging technology risk areas like cloud computing
• Project Management fundamentals, CISA, CISSP, PMP, CRISC or equivalent

Purpose, Valuesand Mindset

We deploy finance responsibly to support people and businesses, acting with empathy and integrity, championing innovation and sustainability, for the common good and the long term.

Our values underpin everything we do: Respect, Integrity, Service, Excellence and Stewardship.

Respect

We harness the power of diversity and inclusion in our business, trust those we work with, and value everyone's contribution.

Integrity

We operate with honesty, transparency and fairness in all we do.

Service

We act with empathy and humility, putting the people and businesses we serve at the centre of what we do.

Excellence

We champion innovation, and use our energy, expertise and resources to make a positive difference

Stewardship

We prize sustainability, and are passionate about leaving things better than we found them.

Our Mindset shapes how we take action, living by our Values, driven by our Purpose, always with our customers and clients at the heart of what we do; our Mindset is to Empower, Challenge and Drive.

Empower

Trust and support each other to deliver. Make decisions with those closest to the topic. Include diverse perspectives. Celebrate success and learn from failure.

Challenge

Question whether things can be done better. Use insights based on data to inform decisions. Be curious about how we can adapt and improve. Speak up and be open to alternative viewpoints.

Drive

Focus on outcomes. Deliver with pace. Be passionate and ambitious about what we do. Take personal responsibility. Actively build collaborative relationships to get things done.