Controls Assurance – Technology and Applications Testing

Join us as Controls Assurance – Technology and Applications testing at Barclays, a strategic role being created to support Retail Banking Leadership across multiple business. You will partner with senior executives, drive independent assurance on technology and application controls and advise on improvements to ensure the efficiency and effectiveness of the bank’s internal controls framework.

To be successful as a Controls Assurance – Technology and Applications Retail lead you will be expected to -:

• Provide assurance to Retail Banking Leadership regarding the design and operating effectiveness of the Technology control environment in mitigating relevant risks through a defined and agreed programme of testing activity for Barclays.
• Review activities to remediate control gaps and assess whether the risk has been fully mitigated and whether the implemented controls are sustainable for Barclays.
• Identify, evaluate, report and escalate risks in line with Barclays risk and control frameworks, utilising relevant tools and analytical techniques.
• Assess compliance with Barclays Group and Technology Policies, Standards, frameworks and procedures across Business Units, Functions and Shared Services.
• Report the results of testing activities to Senior Stakeholders across Business Units, Functions and Shared Services.
• Meet the needs of key internal and external risk processes, reporting schedules, stakeholders and regulatory authorities in delivering assurance activities.

Some other highly valued skills include:

• experience of IT Audits, IT Application Controls (ITAC) / IT General Controls (ITGC) / Cyber Security Assessments / Data Privacy Assessments
• Good understanding of industry frameworks such as COSO, COBIT, NIST, ISO27001, and control frameworks
• Depth of knowledge of key areas in technology risk, including operations, change, security, resilience at both application and infrastructure layers
• Experience with data analytics tools and techniques, technology controls testing would be significantly beneficial.
• Experience of working in a IT risk, IT control or IT audit function.  Strong report writing skills and project management skills.
• Competence in Cyber Security Frameworks, Standards and Principles
• Understanding of key ITAC categories such as system interface, reconciliation, segregation of duties and report generation 
• Understanding of Identity Access Management, Privileged Access Management and Cloud Security
• Practical experience in managing Technology Risks & Controls in Banking/ NBFC domains

You may be assessed on key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking and digital and technology, as well as job-specific technical skills.

This role will be based out of Glasgow.

Purpose of the role

To partner with the bank, to provide independent insurance on control processes and advise on improvements to ensure the efficiency and effectiveness of the bank’s internal controls framework.  

Accountabilities

• Collaboration across the bank to maintain a satisfactory, robust, and efficient control environment through the execution of ad-hoc assessments and testing on the design and operational effectiveness of the internal controls, aligned to control policies and standards.
• Development of detailed test plans and procedures to identify weaknesses in internal controls and other initiatives aligned to the bank’s control framework to mitigate any potential risks and issues, prioritised by its severity to disrupt bank operations, potential losses, and reputational impact.
• Communication of key findings and observations to the relevant stakeholders and business units to improve overall control efficiency and provide corrective actions to senior managers. Collaboration with other control professionals to resolve complex issues and ensure consistent testing methodologies across the bank.
• Development of a knowledge centre containing detailed documentation of control assessments, testing on design and operational effectiveness of procedures, findings, and the distribution of material on internal controls to train and upskill colleagues within the bank.

Assistant Vice President Expectations

• To advise and influence decision making, contribute to policy development and take responsibility for operational effectiveness. Collaborate closely with other functions/ business divisions.
• Lead a team performing complex tasks, using well developed professional knowledge and skills to deliver on work that impacts the whole business function. Set objectives and coach employees in pursuit of those objectives, appraisal of performance relative to objectives and determination of reward outcomes
• If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L – Listen and be authentic, E – Energise and inspire, A – Align across the enterprise, D – Develop others.
• OR for an individual contributor, they will lead collaborative assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will identify new directions for assignments and/ or projects, identifying a combination of cross functional methodologies or practices to meet required outcomes.
• Consult on complex issues; providing advice to People Leaders to support the resolution of escalated issues.
• Identify ways to mitigate risk and developing new policies/procedures in support of the control and governance agenda.
• Take ownership for managing risk and strengthening controls in relation to the work done.
• Perform work that is closely related to that of other areas, which requires understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function.
• Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategy.
• Engage in complex analysis of data from multiple sources of information, internal and external sources such as procedures and practises (in other areas, teams, companies, etc).to solve problems creatively and effectively.
• Communicate complex information. 'Complex' information could include sensitive information or information that is difficult to communicate because of its content or its audience.
• Influence or convince stakeholders to achieve outcomes.

All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.