About BNP Paribas India Solutions:
Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union’s leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.
About BNP Paribas Group:
BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialised businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability
Commitment to Diversity and Inclusion
At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.
Job Title:
Information security User manager
Date:
Jan-2025
Department:
ITGP
Location:
Mumbai
Business Line / Function:
BNPP FORTIS
Reports to:
(Direct)
ISPL ITG APS
Grade:
(if applicable)
(Functional)
ITGP/FORTIS
Number of Direct Reports:
Directorship / Registration:
NA
Position Purpose
Information security is the protection of information (and associated assets). Information must therefore be protected continuously and appropriately against a wide range of threats by implementing a suitable set of controls, including policies, processes, procedures, organizational structures and software & hardware functions.
Information Security is comprised of a number of domains of which Access Management is a major one. Access Management is about defining and implementing security requirements to control access to information and hence to prevent unauthorized access to them.
The BNP Paribas Fortis Access Management Team aims at managing the accesses that users of BNP Paribas Fortis can have to information resources on an enterprise level.
Responsibilities
The User Manager is mainly in charge of the day-to-day activities related to users and user-role assignments in order to meet the evolving needs of the users of the organization. User Management covers the activities that resides from changes, e.g. when a person joins the organization, moves from one job function to another or leaves the organization.
He/she operates under the policies & guidelines set out by the Security Office and therefore he/she should gain a thorough knowledge of the access management solution.
The User Manager also serves as the Single Point Of Contact for the users and by consequence he/she should have strong communication skills to be able interact with the users and their managers in an effective & professional way. He/She should also be very concise in their actions.
The activities of the User Manager will mainly be focused on the following fields:
· Definition, organization and monitoring of the day-to-day activities related to users and the assignment of accesses to the users;
· Ensure the implementation of the Access Management Solution;
· Provide support and expertise to any stakeholders impacted by User Management activities;
· Enforce the Access Management rules, strategies and policies;
· Actively contribute to the continuous improvement of the Access Management Solution.
Technical & Behavioral Competencies
A
Deliverables + Key activities
1.
Security Office:
– Act as a valuable team member for the day-to-day running of the activities
– Provide guidance and assistance to other team members
– Acts as backup for other User Managers
– Communicate and align with other Teams in the IAM Cluster
– Establish and maintain relationships with the key actors involved in the access management process
2.
Definition of the Access Management Solution, Policies and Procedures
– Provide expertise and guidance on the Access Management Solution specific to the Security Office and actively contribute to its continuous improvement
– Manage and ensure controlled implementation of the Access Management Solution and of changes to the organizational structure of the Unit within the IAM environment
– Assist in the definition, maintenance and proper implementation of the access management framework, policies & standards and of processes shared with other departments
– Enforce the Access Management rules, strategies and policies
3.
User Life Cycle & Workflow:
Actively participate and further develop and improve User Management processes and procedures within the Security Office.
4.
User Management:
– Define, organize and monitor of the day-to-day activities related to users and the assignment of accesses to the users. Perform these activities in adherence to the defined policies and standards.
– Provide support and expertise to any stakeholders impacted by User Management activities
– Provide assistance in the use of the tool and workflow
– Resolving calls related to User Management
5.
Communication and Training:
– Further develop the documentation and training material related to user management
– Provide communication and training on user management
– Setup and maintain communication channels and ensure that relevant documentation is published
– Ensure alignment of all training and communication activities with other stakeholders
6.
Monitoring & Control:
– Define and implement Monitoring, Control and Reporting tasks according to the defined policies (control plan)
– Assist in the requirements definition and development of appropriate facilities and tools to perform the Monitoring & Control tasks
– Participate in the resolution of Access Management related Audit issues
– Assist in measuring the Key Performance Indicators and in monitoring the achievement of the defined targets
– Report and escalate any identified risk and potential breach
7.
Governance
Active participation in further improvement of the shared IAM environment by indicating new requirements; by participating in work groups established for transversal topics; by being actively involved in testing etc.
8.
Transformation
(when applicable)
Participate in projects and perform all required temporary tasks to enable a smooth transition from current environment to target environment.
Specific Qualifications (if required)
· Agile environment.
· Follows the Customer processes for projects, incident and change management.
· Being standalone and team worker, analytical minded, meet commitment, ability to work in a dynamic and multi-cultural environment, flexible, customer-oriented, understand risk awareness.
· Motivated self-starter, process-oriented with high attention to detail
· Quick self-starter, pro-active attitude.
· Good communication skills, Good analytical and synthesis skills.
· Autonomy, commitment and perseverance.
· Ability to work in a dynamic and multicultural environment.
· Flexibility (in peak periods extra efforts may be required).
· Open minded and show flexibility in self-learning new technologies/tools.
· You are customer minded and can translate technical issues into non-technical explanations.
· You are always conscious about continuity of services.
· You have a very good team spirit and share your knowledge and experience with other members of the team. Working in collaboration with team.
· Client-oriented, analytical, initiative oriented and able to work independently.
· Be flexible and ready to provide support outside of Business hours (on-call).
· Able to take additional responsibility.
· Able to work from base location Mumbai (Whichever is your base location) during hybrid model.
· You are flexible and ready to provide support outside of Business hours (on-call).
Skills Referential
Behavioural Skills: (Please select up to 4 skills)
Ability to collaborate / Teamwork
Communication skills - oral & written
Organizational skills
Client focused
Transversal Skills: (Please select up to 5 skills)
Ability to understand, explain and support change
Ability to develop and adapt a process
Ability to develop others & improve their skills
Ability to set up relevant performance indicators
Ability to manage a project
Education Level:
Bachelor Degree or equivalent
Experience Level
At least 5 years
Other/Specific Qualifications (if required):
