OPC Officer

About BNPP:

BNP Paribas is the European Union’s leading bank and key player ininternational banking. We operate in 63 countries and have nearly 183,000employees globally.

Our mission is to contribute to a responsible and sustainableeconomy by financing and advising clients according to the highest ethicalstandards. We offer secure, sound and innovative financial solutions toindividuals, professional clients, corporates and institutional investors whilestriving to address the fundamental challenges of today with regard to theenvironment, local development and social inclusion.

About BNPP in the Nordics

BNPParibas is the global bank with the strongest presence on the ground in theNordic region. We have close to 900 employees based locally in the Nordics andoffer our clients a wide range of services through our business units; BNPParibas Corporate and Institutional Banking, Arval, BNP Paribas AssetManagement, Alfred Berg, BNP Paribas Cardif, BNP Paribas Factor, BNP ParibasLeasing Solutions, and BNP Paribas Personal Finance.

Arval BNP Paribas is a provider of operating leasing in 30 countries worldwide.  Our passion for Service, Sustainability, and Solutions is brought to life by each and every one of our people – who we call Journey Makers.  

About this opportunity 

Main scope of the role

In the role as an OPC Officer, you will be responsible for organizing the operational risk management and the permanent control framework on a risk-based approach. The purpose of the OPC function globally is – among others - to ensure the further development of a high-level culture of risk by employees, but also the effectiveness and efficiency of Arval’s internal operation. Overall, you will work across all of the Norwegian organization and create fruitful relationship with your colleagues within the business.

What you will do 

Identification and assessment of risks and controls (Risk and Control Self-Assessment) 

• Ensure that key operational units and processes, critical IT assets, material risks and risk mitigates are identified inventoried and maintained at the appropriate level 
• Maintain the risk taxonomy, cartography and risk assessment at the appropriate level 
• Ensure the effective implementation and maintenance of the RCSA framework within the 1st LoD control perimeter at the appropriate level 
• Perform/drive the risk identification and assessment in liaison with independent control functions when needed, ensuring validation by the relevant management level and consistency with the defined risk tolerance 
• Contribute to the definition and follow-up of remediation plan if needed 

Procedures 

• Ensure that Group procedure requirements are implemented locally, complemented with local specificities (regulations, tools organizations, ...) 
• Ensure that the procedures designed by the businesses and functions are identified, updated, properly stored and communicated to the relevant stakeholders within Arval Norway
• Identify and propose calibration of Arval Norway's procedures according to the outcome of the risk assessment and other risk events (historical incidents (HI), control results, external events, Audit missions, ) 

Controls and actions plan 

• Define and regularly update the Arval Norway's control plan according to the outcome of the risk assessment, regulations, other risk events (HI, control results, external events, Audit missions, ...) 
• Perform and/or coordinate controls according to this control plan 
• Ensure that control results are reviewed and analyzed by the Comex members and when relevant by operational teams / relevant stakeholders and that remediation action plans are defined if and when needed 
• Input in Group tools the control results and major action plans 
• Follow-up the implementation of remediation actions 

Findings, recommendations and permanent control actions 

• • Upon notification/receipt of reports, organize the follow-up of the findings and recommendations, either issued internally (e.g. IG supervision) or externally (external auditors, supervisors) and ensure that they are closed within due date 

Dynamic management of the Operational Risk Management 

Management of historical incidents (including near-misses) 

• Alert the management and the independent control functions if needed on key incidents 
• Collect incidents (including impacts measurement), report and update in the Group database 
• (as well as local databases if needed), including suspected and attempted fraud cases 
• Analyze incidents in a timely manner and define, jointly with the relevant stakeholders, the correctives measures be implemented to mitigate risks 
• Follow-up and / or initiate the implementation of remediation actions and the unfolding of long term incidents 
• Perform controls on the incident collection process, in particular the cross-check with other databases (accounting or other when existing) and the half-yearly attestation by the local management 

Management of external events 

• Watch over, in collaboration with Independent Control Functions, external events so that any major external event is taken into account in operational risk framework

Supervision of the implementation of the prevention and detection Anti-fraud Framework 

• Promote the Implementation and operation of ad hoc means and tools (tools, procedures, guidelines) with the support of the CCCO Office; 
• Setup and implement a fraud risk awareness training program for newcomers and specific trainings for employees most exposed to fraud risk; 
• Gathering of all information relevant to fraud risk and its dispatching to the RISK Function and the 3LoD; 
• Follow up, on a regular basis, of the management of fraud risk, that should be on the agenda of internal Monitoring Committees or their equivalents (ICC is an option); 
• Management of the implementation of recommendations from the 3LoD. 

Support Local Conduct framework 

Coordination of the local Conduct Framework with Corporate and local stakeholders 

• Co-animate the conduct framework 
• Organize Local Conduct Committees, report KPI's and monitor the implementation of the Conduct action plans. 

Management support and governance 

Involvement in Committees 

• Coordinate, support and advise in the validation process for exceptional transactions, new products/activities/processes (including outsourcing initiatives) validation committees (e.g. TAC/NAC) and follow-up of the implementation (e.g. that the conditions issued by control functions are met) 
• Coordinate, or ensure existence of participation to the committees that ensure continuous adherence of Arval Norway to the regulations and notably in charge of reviewing regulatory related control results and performance indicators, ensuring escalation of potential breaches, following-up of required remediation actions, analysing any impact of change of regulation on OPC set-up, in liaison with Independent Control Functions (Compliance, Legal....)

Alert and Reporting 

• Alert and escalate to the relevant level of management as well as to the relevant independent control functions any operational risk incident and/or any recurring weakness 
• Perform periodic and ad-hoc reporting to the appropriate level of management as well as to independent control functions 
• Contribute to the periodic and ad-hoc reporting assessment managed by 2nd LoD control functions Awareness, training and advisory 
• Ensure the employee's awareness on Group's policies and procedures 
• Ensure an appropriate training on Operational risks and Permanent Control framework is provided to employees, notably newcomers 
•  Act as a local relay for risk awareness initiatives sponsored by 2nd LoD control functions or CCCO Office

Relevant experience and requirements

Diversity Statement

As the Bank for a changing world, we truly believe that promoting diversity makes it better. We welcome all talents and empower them to prosper in an inclusive workplace. Join us and bring your full self to work with your own experience and identity!