Director of Cyber

Purpose of the role

To provide independent review and challenge of the Operational Risk elements of particular risk categories across the bank. Ensuring they are carried out in accordance with Barclays Operational Risk Framework, Policies, and Standards

Accountabilities

• Risk identification and proactive risk management, identifying interconnected, horizon and emerging risks to assist the business in understanding, managing and mitigating the right risks in line with their business strategy and objectives.
• Analysis of operational risk data to identify trends, patterns, and emerging risks.
• Risk-based analysis of business processes, systems, and controls to assess the likelihood and impact of identified risks.
• Ongoing research and monitoring of internal and external sources to identify potential Operational Risks.
• Oversight, review and challenge of 1st Line activities including - Risk Control Self Assessments (RCSAs), Risk Events, Issues and attendance at key Risk and Control meetings (with associated reporting) ensuring they accurately reflect the business risk position,.
• Stakeholder management, engaging and working effectively with First and Second Line management.
• Risk based 2nd Line input into 1st Line Projects, Initiatives and Strategic decision making.

Director Expectations

• To manage a business function, providing significant input to function wide strategic initiatives. Contribute to and influence policy and procedures for the function and plan, manage and consult on multiple complex and critical strategic projects, which may be business wide..
• They manage the direction of a large team or sub-function, leading other people managers and embedding a performance culture aligned to the values of the business. Or for an individual contributor, they lead organisation wide projects and act as deep technical expert and thought leader, identifying new ways of working and collaborating cross functionally. They will train, guide and coach less experienced specialists and provide information affecting long term profits, organisational risks and strategic decisions..
• Provide expert advice to senior functional management and committees to influence decisions made outside of own function, offering significant input to function wide strategic initiatives.
• Manage, coordinate and enable resourcing, budgeting and policy creation for a significant sub-function.
• Escalates breaches of policies / procedure appropriately.
• Foster and guide compliance, ensure regulations are observed that relevant processes in place to facilitate adherence.
• Focus on the external environment, regulators, or advocacy groups to both monitor and influence on behalf of Barclays, when appropriate.
• Demonstrate extensive knowledge of how the function integrates with the business division / Group to achieve the overall business objectives.
• Maintain broad and comprehensive knowledge of industry theories and practices within own discipline alongside up-to-date relevant sector / functional knowledge, and insight into external market developments / initiatives.
• Use interpretative thinking and advanced analytical skills to solve problems and design solutions in often complex/ sensitive situations.
• Exercise management authority to make significant decisions and certain strategic decisions or recommendations within own area.
• Negotiate with and influence stakeholders at a senior level both internally and externally.
• Act as principal contact point for key clients and counterparts in other functions/ businesses divisions.
• Mandated as a spokesperson for the function and business division.

All Senior Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L – Listen and be authentic, E – Energise and inspire, A – Align across the enterprise, D – Develop others.

All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.

Skills

• Conducting Risk Assessments
• Hands-on with any of the following:
  • Application Security
  • Vulnerability Management
  • Identity and Access Management
  • Network Security
  • Cloud Security
  • Security Operations
  • Incident Management and Response
  • Cryptography
• Communicating complex security topics to technical and non-technical audiences

Experience

• Proven experience in technical cyber roles
  • Ideally demonstrating capability across different fields within Cyber
• Working experience with common Frameworks such as NIST CSF, ISO 27001
• Experience in presenting to Risk Committees or other senior forums
• Experience with various regulatory bodies and delivering to requirements ie DORA
• CISSP, CISM or similar qualifications would be helpful
• Experience of working with the European Regulators