AVP Cloud Security Audit — Risk & Compliance Leader

Barclays; New York (NY); On-site; USD 95,000 - 150,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401(k)

Job summary

Barclays seeks an AVP - Cloud Security Audit to ensure effectiveness and compliance of cybersecurity processes across investment functions. You will execute audits, test controls, and collaborate with seasoned professionals in a fast-paced environment.

This role offers visibility and growth in a dynamic security program. The candidate should understand regulatory audit requirements and standards (NIST, CIS, ISO 27001, CSA), and be capable of risk assessments, control testing, and audit

Qualifications

• Experience in regulatory-driven audit environments.
• Ability to assess IAM, encryption, logging, and vulnerabilities.
• Experience with risk assessments, control testing, and audit reporting.
• Knowledge of NIST, CIS, ISO 27001, and Cloud Security Alliance standards.

Responsibilities

• Audit development and delivery support across financial statements, accounting practices, operations, IT systems and risk management.
• Identify operational risks to support the Barclays Internal Audit (BIA) Audit Plan through risk assessments.
• Assess internal control effectiveness and their ability to identify and mitigate regulatory risk.
• Communicate key findings and recommendations to stakeholders including the Audit Owner and leadership.
• Identify regulatory news and industry trends to provide timely insights and best practices.

Skills

Audit execution

Regulatory audits

Risk assessment

Access controls

Change management

Communication

Job description

Barclays seeks an AVP - Cloud Security Audit to ensure effectiveness and compliance of cybersecurity processes across investment functions. You will execute audits, test controls, and collaborate with seasoned professionals in a fast-paced environment.

This role offers visibility and growth in a dynamic security program. The candidate should understand regulatory audit requirements and standards (NIST, CIS, ISO 27001, CSA), and be capable of risk assessments, control testing, and audit