Job Title: Cybersecurity Framework Expert
Department: ITG CDF
About Business line/Function: ITG is a Group function established in 2019 within ISPL, with a presence in Mumbai and Chennai. We collaborate with various business lines across the Group to provide IT services.
BNP Paribas, the leading bank in the European Union and a leading international player, is seeking to complement and strengthen its existing teams in the areas of IT risk management, cybersecurity, and the fight against digital fraud.
Within IT Group, the Informatics Directorate of BNP Paribas, the Cybersecurity & Digital Fraud Department’s mission is to structure, strengthen, and harmonize IT risk management and cybersecurity across the BNP Paribas Group, comprising approximately 30 entities, by:
- Defining the vision and strategy for IT risk management and cybersecurity and ensuring the implementation of this strategy within the Group’s operating entities;
- Monitoring the security of the Group’s information systems; and
- Steering the IT continuity and resilience strategy and methodological framework.
The evolving cyber-threat landscape increases security risks in the financial sector, leading BNP Paribas to strengthen its cybersecurity maturity, IT risk management, and operational resilience.
Within the IT Group Cybersecurity & Digital Fraud Department, you will be part of the team based in India.
Position Purpose: This is a key role in developing the India platform and ensuring that core cybersecurity, IT risk, and operational resilience activities are performed with the required efficiency and quality to protect BNP Paribas.
Responsibilities
Direct Responsibilities
· Contribute to defining new cybersecurity requirements, or reviewing existing ones, across 28 cybersecurity topics, including artificial intelligence, application security, data security, network security, cloud and container security, IAM, asset management, and SWIFT, for application across all Group entities.
· Define new procedures, or review existing ones, to complement the established requirements.
· Define evidence samples for the requirements to facilitate the cybersecurity maturity assessment.
· Ensure projects are delivered within defined timelines and meet high-quality standards in both technical precision and grammatical accuracy.
· Host and facilitate workshops to share, discuss, and consult on new cybersecurity requirements and procedures with Group experts worldwide and the second line of defense.
· Regularly report project status and challenges to the manager.
· Contribute to defining and reviewing patterns that group cybersecurity requirements and apply them to all Group entities according to their level of risk exposure, as part of the Group cybersecurity program for assessing entity maturity through the Cyber Maturity Assessment (CMA).
· Contribute to the evolution of these patterns by incorporating new cybersecurity requirements as major Group programs progress, such as Zero Trust, DLP, and PQC.
· Regularly discuss, share, and challenge BNP Paribas entities regarding applicable patterns.
· Contribute to the evolution of the Group security program, including cybersecurity requirements, evidence, and assessments, within the Group GRC IT tool.
· Perform gap assessments against applicable regulations, including the EU GDPR and DORA, and propose new requirements to achieve compliance.
· Advance professional knowledge by obtaining at least one relevant certification every two years, such as AAISM, CRISC, CCSP, CCSK, or CCNA.
Contributing Responsibilities
Technical & Behavioral Competencies
· A minimum of six years of dedicated cybersecurity experience and at least ten years of total professional experience.
· Proven experience working in cross-cultural and international environments and collaborating with large, geographically dispersed teams.
· Advanced communication skills, including strong writing, editing, presentation, and constructive challenge skills.
· Ability to articulate technical concepts to non-technical stakeholders.
· In-depth understanding of cybersecurity and continuity frameworks, regulations, and standards, such as NIST, DORA, PCI DSS, ISO 27001, and ISO 22301.
· Demonstrates a positive, motivated attitude, rigor, and attention to detail.
· Ability to prioritize and multitask with flexibility and adaptability.
· Ability to manage conflicting priorities and multiple tasks.
· Strong knowledge and understanding of current cybersecurity trends.
Specific Qualifications:
· Proficient in MS Word and MS Excel.
· Required industry certification: CISSP.
Skills Referential (Required knowledge, skills and abilities)
Transversal Skills:
· Ability to anticipate business / strategic evolution
· Ability to set up relevant performance indicators
· Ability to understand, explain and support change
Behavioral Skills:
· Ability to synthesize and simplify
· Active listening
· Ability to share and transfer knowledge
· Communication skills - oral & written
Education Level: Bachelor’s Degree or equivalent with at least 10 years of experience.
Location: Chennai
About BNP Paribas Group:
BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability.
About BNP Paribas India Solutions:
Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union’s leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.
Commitment to Diversity and Inclusion
At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.
