Job Title: Permanent Controller
Department: Cybersecurity and Digital Fraud
About Business line/Function: ITG is a Group function established in 2019 within ISPL, with a presence in Mumbai and Chennai. We collaborate with various business lines across the Group to provide IT services.
The position is part of Cybersecurity and Digital Fraud (CDF), the Group function responsible for cyber risk management, and more specifically the CISO Bureau supporting the Payments IT Risk Officer (ITRO) function.
The Payments ITRO team provides independent challenges and oversight within the first line of defense for the IT Payments Services perimeter. The team works with IT production, application, cybersecurity and governance stakeholders to ensure that ICT risks are understood, permanent controls are effectively executed, and remediation actions are completed on time.
Position Purpose: The Operational Permanent Controller is responsible for executing and coordinating ICT permanent controls across the IT Payments Services perimeter. The role assesses the quality, completeness and traceability of control evidence, identifies control weaknesses, and follows remediation actions through closure.
This is a hands-on role combining control execution, analytical review and stakeholder coordination, with a direct contribution to the continuous improvement of the ICT control environment.
Responsibilities
Direct Responsibilities
· ICT Permanent Control Execution
o Plan, organize and perform ICT permanent controls in line with the approved control plan,
o Collect and review supporting evidence from control owners and relevant IT stakeholders.
o Assess whether control objectives are met and whether evidence is complete, accurate, reliable and fully traceable.
o Record control results, findings and supporting evidence in the applicable Group GRC tools, including Risk360, where relevant.
o Ensure control execution is completed within agreed deadlines and proactively flag constraints or dependencies.
· Analysis of Results and Remediation Follow-up
o Analyze control results to identify weaknesses, recurring issues, potential risk exposure and opportunities to strengthen the control environment.
o Discuss findings constructively with control owners and subject-matter experts, ensuring that observations are factual, clearly documented and supported by evidence.
o Contribute to the definition of proportionate corrective actions, accountable owners and realistic target dates.
o Monitor remediation plans through closure, challenge overdue or insufficient actions and escalate material delays, blockers or residual risks when appropriate.
o Validate closure evidence in accordance with the applicable governance and documentation standards.
· Reporting, Governance and Stakeholder Coordination
o Contribute to the reporting on control execution, findings, remediation progress, overdue actions and key areas requiring management attention.
o Work closely with the Payments ITRO team, IT production and application teams, Cybersecurity, IT Governance, process owners and other control functions.
o Promote a consistent risk and control culture across the scope through day-to-day collaboration and constructive challenge.
Contributing Responsibilities
· Contribute to periodic reviews and continuous improvement of control procedures, testing approaches, evidence expectations and reporting templates.
· Participate in the identification of control gaps, duplication or opportunities for simplification and automation.
· Support awareness sessions and practical guidance for control owners on control execution and evidence quality.
· Contribute, when required, to broader IT operational risk activities such as risk assessments, issue follow-up and control framework reviews.
· Collaborate effectively across locations and time zones as a member of the extended Payments ITRO team.
Technical & Behavioral Competencies
· Practical experience in operational permanent control, ICT risk management, internal control, technology risk or IT audit.
· Good understanding of control execution, control testing, evidence assessment, issue identification and remediation tracking.
· Good understanding of IT operations, application management, cybersecurity and IT service-management processes.
· Ability to translate control requirements into clear testing steps and evidence expectations.
· Experience with GRC or operational risk tools; knowledge of Risk360 and ServiceNow/GRC is an advantage.
· Strong proficiency in Microsoft Excel and PowerPoint for analysis, tracking and management reporting.
Specific Qualifications:
· Bachelor’s degree in information technology, or Risk Management or Audit, or equivalent professional experience.
· Minimum 3 years of relevant experience in IT controls, technology risk, operational risk, internal control or IT audit.
· Experience working with cross-functional and international stakeholders is preferred.
Skills Referential (Required knowledge, skills and abilities)
Behavioral Skills:
· Strong analytical and synthesis skills, with the ability to distinguish material issues from minor exceptions.
· High attention to accuracy, evidence quality, traceability and documentation.
· Proactive, accountable and able to manage several controls and action plans in parallel.
· Confident in engaging multiple stakeholders and challenging constructively while maintaining collaborative relationships.
· Clear written and oral communication, including concise management reporting and meeting facilitation.
· Curious and improvement-oriented, with a practical problem-solving mindset.
· Team player who is comfortable working in a multicultural and geographically distributed organization.
Education Level:
· Bachelor’s degree in information technology, or Risk Management or Audit, or equivalent professional experience.
· Minimum 3 years of relevant experience in IT controls, technology risk, operational risk, internal control or IT audit.
Location: Mumbai
About BNP Paribas Group:
BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability.
About BNP Paribas India Solutions:
Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union’s leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.
Commitment to Diversity and Inclusion
At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.
