MD - Chief Controls Officer - Technology, Cyber & Resilience

Barclays

22h

About The Position

The Chief Controls Officer (CCO) role is responsible for assessing the integrity and effectiveness of the bank's internal control framework. This position plays a crucial role in mitigating risks and protecting the bank's operational, financial, and reputational standing. The CCO will collaborate with various stakeholders across the bank and business units to enhance overall control effectiveness through detailed documentation of control assessments, procedures, and findings. This includes identifying and investigating potential weaknesses and issues within internal controls to promote continuous improvement and risk mitigation, prioritized by their severity to disrupt bank operations. The role also involves developing reports to communicate key findings from risk assessments, including control weaknesses and recommendations, to control owners, senior management, and other stakeholders. Execution of reviews to determine the effectiveness of the bank's internal controls framework, aligned to established and evolving policies, regulation, and best practice, is also a key responsibility. Furthermore, the CCO will ensure the implementation and adherence to the Barclays Controls Framework and establish appropriate methodologies for assessing controls against this framework.

Requirements

Deep, enterprise-level mastery of first line risk and control leadership, with ownership of the end-to-end Technology, Cyber and Resilience control environment.
Setting the expectations, governance and assurance approach for proactive risk identification across technology, cyber, resilience and insider threat domains, ensuring emerging threats, control weaknesses and systemic vulnerabilities are identified early, escalated clearly and translated into prioritised action
End-to-end control domain leadership, ensuring control design, standards, metrics, issue management, regulatory remediation and resilience obligations operate as a single, coherent system rather than discrete activities
Credibility as a former senior technology leader, ideally with CIO-level experience, bringing the practical judgement to challenge technology delivery, cyber risk, resilience readiness and transformation plans from both a business and control perspective
Authoritative expertise across technology risk, cyber security and operational resilience, and how these interconnect to protect Barclays’ operational integrity, customer outcomes and regulatory standing

Responsibilities

Knowledge of business areas, products, processes and platforms to be able to assess risk
Collaboration with various stakeholders across the bank and business units to improve overall control effectiveness through detailed documentation of control assessments, procedures, and findings.
Identification and investigation of potential weaknesses and issues within internal controls to promote continuous improvement and risk mitigation aligned to the bank’s control framework, prioritised by its severity to disrupt bank operations.
Development of reports to communicate key findings from risk assessment including control weaknesses and recommendations to control owners, senior management, and other stakeholders.
Execution of reviews to determine the effectiveness of the bank's internal controls framework aligned to established and evolving policies, regulation, and best practice.
Implementation of adherence to the Barclays Controls Framework and set appropriate methodology of assessing controls against the Controls Framework.
Manage a large, complex or diverse function and take accountability for the strategic direction of the function to significantly strengthen successful and efficient businesses and contribute to the strategic initiatives of the Barclays Group
Lead and mentor high performing teams and embed a performance culture aligned to the values of the business. Or for an individual contributor, they lead organisation wide projects, act as a profound technical expert and thought leader, Identifying new and innovative/ground breaking ways of working. They will train, guide and coach less experienced specialists and provide information affecting long term profits, organisational risks and strategic decisions.
Drive and achieve overall success and / or competitiveness of a business division by influencing senior leaders and committees.
Strategically assess and manage risks to protect the business division / function and growth.
Influence company policy and develop functional procedures in conjunction with senior leaders / strategic positions across the business.
Demonstrate interpretative thinking for innovative solutions in complex situations and conceptual thinking in completely new situations.
Exercise management authority to make significant / complex business and strategic decisions that impact the Barclays Group, business division or function.
Negotiate with and influence stakeholders at a senior level both internally and externally and foster growth for Barclays business.
Mandated as the business division/ functional spokesperson or representative to external bodies and shapes the public image of Barclays.
Demonstrate exceptional knowledge of how business divisions and functions integrate with the Group to achieve the overall business objectives alongside industry theories and practices within own discipline.
Maintain broad and comprehensive functional expertise and significant product knowledge.
Accountable for the control and governance agenda of the business division / function.
Focus on the external environment, regulators, or advocacy groups to both monitor and influence on behalf of Barclays.
Demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L – Listen and be authentic, E – Energise and inspire, A – Align across the enterprise, D – Develop others.
Demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.
Solving enterprise-wide, complex and ambiguous control challenges, often spanning multiple risk domains and without established precedent
Setting the enterprise control strategy for Technology, Cyber and Resilience, aligned to Group priorities
Shaping future control strategy, including control simplification, automation, reporting transformation and business-aligned risk insight
Leading a globally distributed organisation (~100 colleagues) through a director-led structure spanning control partnering, risk category leadership and enabling capabilities