Business Information Security Officer

Barclays•Wilmington, NC

20h•Onsite

About The Position

The purpose of the role is to provide a primary liaison service between the business, technology, and security functions to ensure the confidentiality, integrity, and availability of information, and support the mitigation of security risk for Barclays US Consumer Banking Business (USCB). This role will utilize prior domain expertise to assist in the implementation and translation of enterprise security requirements as well as policies and procedures. The role involves contributing to or setting strategy, driving requirements, and making recommendations for change. It includes planning resources, budgets, and policies; managing and maintaining policies/processes; delivering continuous improvements; and escalating breaches of policies/procedures. For individual contributors, this means being a subject matter expert, guiding technical direction, leading collaborative assignments, and training less experienced specialists. The role requires advising key stakeholders, managing and mitigating risks, demonstrating leadership in risk management and control strengthening, and understanding organizational functions to achieve business goals. Collaboration with other business areas is essential to stay updated on business activity and strategies. Solutions will be based on sophisticated analytical thought, comparing and selecting complex alternatives, with in-depth analysis and interpretative thinking required to define problems and develop innovative solutions. Extensive research outcomes will be adopted in problem-solving processes. Building and maintaining trusting relationships and partnerships with internal and external stakeholders is crucial for achieving key business objectives, utilizing influencing and negotiating skills. All colleagues are expected to demonstrate Barclays Values (Respect, Integrity, Service, Excellence, Stewardship) and the Barclays Mindset (Empower, Challenge, Drive).

Requirements

Broad domain expertise across network security (cloud, IAM, data protection, 3rd party and vendor risk, application security, incident response, etc.)
Working knowledge of NIST Cyber Security and/or PCI DSS frameworks
Experienced in governance and oversight, including committees, KRIs/KCIs (Key indicators), risk acceptances and control issues - translating Group Cyber GRC requirements into BU implementation and adoption
Risk and controls background within the consumer banking domain
Prior experience performing cyber due diligence to support Mergers and Acquisitions and Business partnerships
Proven stakeholder management experience across Technology, business, and control partners – building business partnerships and creating strategic influence

Nice To Haves

Working knowledge of Cards and Payments industry

Responsibilities

Provide a primary liaison service between the business, technology, and security functions.
Ensure the confidentiality, integrity, and availability of information.
Support the mitigation of security risk.
Collaborate with stakeholders to understand their security requirements in business processes and IT projects.
Execute risk assessments to identify and prioritize potential cybersecurity threats.
Guide the implementation of mitigation strategies and communicate findings to senior stakeholders.
Collaborate with business units to develop and implement security policies and procedures.
Manage the implementation, testing, and monitoring of security controls across IT systems.
Execute training content and sessions to educate employees on cybersecurity awareness and safe online practices.
Manage complex cybersecurity incidents by collaborating with IT teams and response experts.
Identify emerging cybersecurity trends, threats, and new technologies to address potential risks.
Contribute to or set strategy, drive requirements, and make recommendations for change.
Plan resources, budgets, and policies.
Manage and maintain policies/processes.
Deliver continuous improvements and escalate breaches of policies/procedures.
Advise key stakeholders, including functional leadership teams and senior management.
Manage and mitigate risks through assessment, in support of the control and governance agenda.
Demonstrate leadership and accountability for managing risk and strengthening controls.
Demonstrate comprehensive understanding of the organization functions to contribute to achieving the goals of the business.
Collaborate with other areas of work for business-aligned support.
Create solutions based on sophisticated analytical thought.
Define problems and develop innovative solutions through in-depth analysis and interpretative thinking.
Adopt and include the outcomes of extensive research in problem-solving processes.
Build and maintain trusting relationships and partnerships with internal and external stakeholders.
Use influencing and negotiating skills to achieve outcomes.