Business Information Security Officer

Implementing cloud-specific security strategies, policies, and procedures, ensuring alignment with overall business goals and regulatory requirements, especially those related to data privacy and security.

Expert design and solutions on cloud security, including cloud security architecture, access control, data protection with a strong understanding of cloud computing platforms (AWS, Azure, GCP) in that order.

Identifying, assessing, and mitigating security risks associated with cloud infrastructure and data platforms, working with the platform engineering team on implementation.

Build consensus across CISO and business units to drive data security solutions organization-wide.

Expertise in modern data platforms, preferably with experience in Databricks and Snowflake implementations.

Relevant certifications such as cloud-specific certifications (e.g., AWS Certified Security - Specialty) are preferred.

Purpose of the role

To serve as the primary liaison between business, technology, and security functions, ensuring the confidentiality, integrity, and availability of information, and supporting risk mitigation.

Accountabilities

• Collaborate with stakeholders to understand security requirements in business processes and IT projects to enhance risk management.
• Perform risk assessments to identify and prioritize cybersecurity threats impacting operations and data, and guide mitigation strategies, communicating findings to senior stakeholders.
• Work with business units to develop and implement security policies and procedures aligned with the risk management framework.
• Manage the implementation, testing, and monitoring of security controls across IT systems to ensure effectiveness and risk mitigation.
• Develop and deliver training sessions to educate employees on cybersecurity best practices.
• Manage complex cybersecurity incidents by collaborating with IT teams and response experts for effective resolution through analysis and support.
• Identify emerging cybersecurity trends, threats, and technologies, advocating for new security solutions.

Director Expectations

• Manage a business function, contribute to strategic initiatives, and influence policies and procedures.
• Lead teams or projects, providing technical expertise and thought leadership, coaching less experienced staff, and influencing organizational decisions.
• Advise senior management and committees to influence decisions outside the immediate function.
• Oversee resourcing, budgeting, and policy creation for a significant sub-function.
• Ensure compliance with policies, regulations, and external standards.
• Monitor and influence external environment, regulators, and advocacy groups.
• Demonstrate understanding of how the function aligns with overall business objectives and stay updated on industry practices.
• Use advanced analytical skills to solve complex problems and design solutions.
• Make strategic decisions within the area of authority and influence stakeholders at senior levels.
• Act as the main contact for key clients and external functions, and serve as a spokesperson for the division.

All senior leaders are expected to embody leadership behaviors: Listen and be authentic, Energize and inspire, Align across the enterprise, Develop others. All colleagues should demonstrate Barclays Values-Respect, Integrity, Service, Excellence, and Stewardship-and the Barclays Mindset-Empower, Challenge, Drive.