Risk & Controls Oversight Senior Lead - Third party and LRR Risk

Purpose of the role

To assess the integrity and effectiveness of the bank’s internal control framework to support the mitigation of risk and protect the bank’s operational, financial, and reputational risk.

• Gain knowledge of business areas, products, processes and platforms to assess risk.
• Collaborate with stakeholders across the bank and business units to improve overall control effectiveness through detailed documentation of control assessments, procedures and findings.
• Identify and investigate potential weaknesses and issues within internal controls to promote continuous improvement and risk mitigation aligned to the bank’s control framework, prioritised by severity.
• Develop reports to communicate key findings from risk assessment including control weaknesses and recommendations to control owners, senior management and other stakeholders.
• Execute reviews to determine the effectiveness of the bank’s internal controls framework aligned to established and evolving policies, regulation and best practice.
• Implement adherence to the Barclays Controls Framework and set an appropriate methodology of assessing controls against the Controls Framework.

As a Risk & Controls Oversight Senior Lead – Third Party and LRR Risk you’ll be responsible for providing expert oversight on third‑party and LRR risk. You will act as a key bridge between the Customer & Digital Team, Chief Operating Office (CCO), second‑ and third‑line risk partners and other stakeholders.

Key responsibilities include:

• Develop and assess risk appetite, lead conversations on risk acceptance, ensure controls are designed and assessed properly, resolve gaps and improve the control environment.
• Maintain ongoing monitoring of controls to keep the business audit‑ready, embed an active risk‑management culture, assess new business activities and leverage tools such as KRIs and risk dashboards.
• Stay abreast of market trends and emerging risks, drive continuous education based on internal and external themes and lessons learned.
• Ensure compliance with relevant laws and regulations, prepare and enhance governance papers and reports.
• Identify opportunities for data‑driven controls monitoring and automation of controls.
• Ensure compliance with RCSA, issue management and risk events management processes in line with the Operational Risk framework.
• Support end‑to‑end third‑party lifecycle risk management – onboarding, due diligence, ongoing monitoring, exit; manage supplier dependency & concentration risk; outsourcing risk; fourth‑party risk visibility; and third‑party performance & control assurance.
• Align controls to LRR obligations and regulatory standards, ensuring correct applicability across customer journeys.
• Balance risk management with business goals when defining risk appetite and influence stakeholders on risk acceptance.
• Conduct deep dives and risk assessments for active risk management; maintain market awareness to drive continuous improvement of internal controls.
• Design and implement the risk strategy aligned with the overall vision of the BUK Customer and Digital function.

All colleagues will be expected to demonstrate the Barclays Values – Respect, Integrity, Service, Excellence and Stewardship – and the Barclays Mindset – to Empower, Challenge and Drive.

• Good understanding of Retail Banking Customer Journeys to identify and manage associated risks and controls.
• Proven experience in data analytics, data science and driving automation and digitisation within risk management processes.
• Experience with end‑to‑end third‑party lifecycle risk management and adherence to regulatory expectations.
• Knowledge of supplier dependency & concentration risk management, outsourcing risk and fourth‑party risk visibility.
• Expertise in aligning controls to LRR obligations and regulatory standards across customer journeys.
• Ability to balance risk management with business goals and influence senior stakeholders.
• Experience designing and implementing risk strategy aligned with organisational vision.
• Self‑motivated with the ability to work independently while contributing effectively within a team of risk specialists.
• Experience delivering transformation and change in risk management.
• Strong business acumen, strategic thinking, digital and technology insight.
• Excellent influencing, negotiating and relationship‑building skills.

This role can be based in London or Northampton.