Head of Data Privacy

Barclays Overview

Barclays is a British universal bank. We are diversified by business, by different types of customers and clients, and by geography. Our businesses include consumer banking and payments operations around the world, as well as a top-tier, full service, global corporate and investment bank, all of which are supported by our service company which provides technology, operations and functional services across the Group.

We are an equal opportunity employer and we are opposed to discrimination on any grounds.

Working Flexibly

We’re committed to providing a supportive and inclusive culture and environment for you to work in. This environment recognises and supports ways to balance your personal needs, alongside the professional needs of our business. Providing the opportunity for all our employees, globally to work flexibly empowers each of us to work in a way that suits our lives as well as enabling us to better service our customers’ and clients’ needs. Whether you have family commitments or you’re a carer, or whether you need study time or wish to pursue personal interests, our approach to working flexibly is designed to help you balance your life. If you would like some flexibility, then please discuss this with the hiring manager, and your request will be reviewed subject to business needs.

Hybrid working

We are currently in the early stages of implementing a hybrid working environment, which means that many colleagues spend part of their working hours at home and part in the office, depending on the nature of the role they are in. We’re flexible on how this works and it may continue to change and evolve. Depending on your team, typically this means that colleagues spend a minimum of between 20% to 60% of their time in the office, which could be over a week, a month or a quarter. However, some colleagues may choose to spend more time in the office over a typical period than their role type requires. We also have a flexible working process where, subject to business needs, all colleagues globally are able to request work patterns to reflect their personal circumstances
Please discuss the detail of the working pattern options for the role with the hiring manager.

About Chief Operating Office

Chief Operating Office (COO) has a pivotal role to play in enabling the COO organisation to deliver its mission: "to be a world-class provider of simple, efficient, innovative and secure operation and technology services to deliver client and shareholder value". The function is responsible for ensuring a resilient and robust operating environment and improving service delivery to the business units through Transaction Cycles and driving a more commercial mindset across the Group.

About CIB Chief Data Office

CIB Chief Data Office is a team of data experts driving positive change in the trust and use of our data across the business:

• Ensures adherence to the Barclays Data & Records Management Strategy, Policy, and Standards
• Drives a consistent approach for managing and using data across the business
• Governs new uses of data to drive commercial benefits and deliver value across the organisation
• Leads data management and design delivery to support strategic initiatives
• Partners with stakeholders to drive improvements in the understanding, use and quality of data
• Management of Data Privacy across the business

Overall purpose of role

As the Corporate & Investment Bank COO continues to develop the operating model for data privacy, this role is responsible for owning the strategic direction, execution and controls related to the regulatory compliance and controls related to data.

Key Accountabilities

• Responsible for compliance with the control requirements in the Data Privacy Standard
• Ensuring there is appropriate and timely escalation of key risks and issues within first-line oversight fora and making sure these are raised appropriately.
• Maintaining and reporting on relevant KPI/KRIs that correspond to the defined risk appetite
• Acting as first point of contact for CIB wide Data Privacy matters, ensuring these are manages/escalated as required (as outlined in the RACI)
• Providing oversight of third-parties processing personal data on behalf of their business, ensuring that breaches, risk events and issues are appropriately recorded, and remediating actions tracked and completed.
• For any new proposal involving processing personal data, or where an existing process operated by their business area is identified as not acting in conformity with a requirements for personal data, ensuring the BU DP AE is comfortable this is appropriate, allowing the BU AE to challenge this where, for example, they believe this would either exceed the entity’s defined tolerance for risk, or otherwise is not appropriate.
• Where personal data breaches occur and advice from DP Compliance and/or DP Legal is that these should be reported to the relevant Data Protection Authority, ensuring the necessary support is there from the business to work with DP Compliance to allow for the timely completion of any investigation and the submission of the report to the Data Protection Authority.
• Act as an advocate within the business for a culture that values Data Privacy as a component of maintaining trust, for example, by supporting activities that aim to raise awareness amongst colleagues in relation to Data Privacy.

Stakeholder Management and Leadership

Senior level influencing, relationship management, business partnering and collaboration at all stakeholder levels, taking account of their levels of influence and interest.

Decision-making and Problem Solving

Good judgement and decision-making to consider short and long-term impacts.

Risk and Control Objective

Ensure that all activities and duties are carried out in full compliance with regulatory requirements, Enterprise Wide Risk Management Framework and internal Barclays Policies and Policy Standards.

Person Specification

• Proven leadership experience at Director level, with a track record of leading largescale remediation and transformation across data within high-risk lines of business e.g., Markets, Banking
• Track record of developing and implementing operating models to enable ongoing conformance with regulatory standards, control environment and data privacy
• Experience of risk and control frameworks from design, implementation, and sustainability of data privacy management
• Able to assess existing control frameworks from risk identification, policy, governance, data, controls, supervision and the control framework
• Credibility and gravitas to challenge and coach upwards, horizontally as well as own development and leadership of team members
• Excellent working knowledge of data privacy, its consumption across the business and related regulations and standards
• Politically astute and able to understand the dynamics of large, complex organisations
• Effective communicator with excellent interpersonal skills.

Essential Skills/Basic Qualifications:

• A demonstrable track-record of establishing and leading a Data Privacy function and defining best practice
• Significant experience gained in a data privacy environment within financial services
• Senior level influencing, relationship management and business partnering and collaboration across the business
• Good understanding of both national and international legal systems (EU and United States)

Desirable skills/Preferred Qualifications:

• Degree or professional qualification in a privacy qualification such as CIPP, CIPP/E, CIPM, CIPT
• Sound working knowledge of regulations such as GDPR, EU GDPR and Data Protection Act 2018

Purpose, Values and Mindset

We deploy finance responsibly to support people and businesses, acting with empathy and integrity, championing innovation and sustainability, for the common good and the long term.

Our values underpin everything we do: Respect, Integrity, Service, Excellence and Stewardship.

Respect

We harness the power of diversity and inclusion in our business, trust those we work with, and value everyone's contribution.

Integrity

We operate with honesty, transparency and fairness in all we do.

Service

We act with empathy and humility, putting the people and businesses we serve at the centre of what we do.

Excellence

We champion innovation, and use our energy, expertise and resources to make a positive difference.

Stewardship

We prize sustainability, and are passionate about leaving things better than we found them.

Our Mindset shapes how we take action, living by our Values, driven by our Purpose, always with our customers and clients at the heart of what we do; our Mindset is to Empower, Challenge and Drive.

Empower

Trust and support each other to deliver. Make decisions with those closest to the topic. Include diverse perspectives. Celebrate success and learn from failure.

Challenge

Question whether things can be done better. Use insights based on data to inform decisions. Be curious about how we can adapt and improve. Speak up and be open to alternative viewpoints.

Drive

Focus on outcomes. Deliver with pace. Be passionate and ambitious about what we do. Take personal responsibility. Actively build collaborative relationships to get things done.