Cyber Audit VP

Barclays UK; Knutsford; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading financial institution is seeking a Cyber Audit VP in the United Kingdom, responsible for providing independent cyber security audit assurance. The ideal candidate should have extensive experience in risk assessment and control evaluation, as well as relevant professional qualifications. This position offers the opportunity to engage with executive management to improve governance and compliance processes.

Qualifications

• 5+ years of experience in risk and control assessment.
• Proven record in developing assurance testing approaches.
• Strong knowledge of cyber security and related technology.

Responsibilities

• Support audit development and delivery processes.
• Identify operational risks and communicate findings.
• Stay informed on regulatory news to provide insights.

Skills

Risk and control assessment within an audit or control function

Developing assurance testing approaches in data security

Knowledge of emerging technology and cyber risks

Relevant professional qualifications (e.g., CISA)

Understanding of regulatory environments

Knowledge of cyber security frameworks

Deep understanding of Cyber Kill Chain

Expertise in major cloud platforms

Education

Relevant graduate degrees

Professional certifications (e.g., CISA, CISM, CISSP)

Tools

SQL

Python

Job description

Join us at Barclays Internal Audit as a Cyber Audit VP, where you will collaborate with cross-functional teams to provide independent and reliable Cyber Security audit assurance to executive management and the Board on governance, risk management, and control effectiveness. In this role, you will contribute to audit planning and execution, risk assessment, control evaluation, and issue resolution. You’ll deliver high-quality audit observations and support the development of actionable recommendations to improve business processes.

To be successful, you should have experience with:

• Risk and control assessment within an audit or control function responsible for testing-driven assurance covering Cyber Security.
• Developing and executing assurance testing approaches in areas such as data security, cryptography, security configuration, network security, cyber incident response, vulnerability management, cyber threat management, information risk management, data leakage protection, identity & access management, and cyber resilience.
• Knowledge of emerging technology, cyber security, and cyber resilience risks.
• Relevant professional qualifications (e.g., CISA, CISM, CISSP) and/or relevant graduate degrees.
• Understanding of regulatory environments related to cyber security.
• Knowledge of cyber security frameworks or standards like NIST, CIS, ISO.
• Deep understanding of Cyber Kill Chain, MITRE ATT&CK framework, and threat modelling.
• Expertise in major cloud platforms (AWS, Azure), including misconfigurations, vulnerable serverless functions, container escapes (Kubernetes/Docker), and cloud storage.

Additional valued skills include:

• Financial services industry knowledge.
• Background in IT Architecture and diverse technology environments, including on-premise, cloud, and hybrid.
• Experience in programme/project delivery (agile, waterfall, SDLC) or auditing major programmes and projects.
• Experience with data analysis tools (SQL, Python) to support audit/control work.
• Preferred certifications such as CEH, CISSP, OSCP.

You may be assessed on key skills such as risk and controls, change and transformation, business acumen, strategic thinking, digital and technology skills, alongside role-specific technical skills.

This role can be based in London or Knutsford.

Purpose of the role

To develop audits aligned with the bank’s standards and objectives by collaborating with colleagues, providing accurate information and recommendations, and ensuring compliance with policies and procedures.

Accountabilities

• Support audit development and delivery, including financial statements, operational processes, IT systems, and risk management.
• Identify operational risks to support the Internal Audit plan through risk assessments.
• Assess internal control effectiveness and their ability to mitigate risks in line with regulatory requirements.
• Communicate key findings and recommendations to stakeholders, including senior management and the Audit Owner.
• Stay informed on regulatory news and industry trends to provide timely insights and best practice recommendations.

Vice President Expectations

• Contribute to strategy, drive requirements, and recommend changes. Plan resources, budgets, and policies; manage and maintain policies/processes; deliver continuous improvements; escalate breaches.
• Manage teams by defining roles, planning for future needs, coaching, and contributing to employee decisions. Lead specialists, influence operations, and ensure strategic and tactical alignment.
• Demonstrate leadership behaviors: Listen and be authentic, Energize and inspire, Align across the enterprise, Develop others.
• For individual contributors, serve as a subject matter expert, guiding technical direction, leading assignments, training, and coaching.
• Advise stakeholders on functional and cross-functional impacts and alignments.
• Manage risks, strengthen controls, and demonstrate accountability.
• Understand organizational functions to support business goals.
• Collaborate across areas to stay aligned with business strategies.
• Develop solutions through sophisticated analysis and research.
• Build and maintain trusting relationships with stakeholders, using influencing and negotiating skills.

All colleagues are expected to embody Barclays Values: Respect, Integrity, Service, Excellence, and Stewardship, and demonstrate the Barclays Mindset: Empower, Challenge, and Drive.