We are looking for

IT Risk Analyst

Back to offers list
Retour

IT Risk Analyst

  • Permanent
  • Full time
  • Madrid, Community of Madrid, Spain
Apply
Job type
Permanent
Brand
BNP Paribas Personal Finance
Schedule
Full time
Reference
1234567890100121923
Last update 07.10.2026

Who are we? 
  
We are South Europe Technologies (SET Iberia); the IT, Data and Operations Shared Service Center of BNP Paribas Personal Finance, with delivery centers in Spain and Portugal, providing the best solutions to BNPP PF entities around the world such as Cetelem (specialized, between others, in financial partnership of major retailers, consumer goods companies and car dealerships).  
 
Among Other Services, Our Portfolio Is Composed Of:  
 
- Applications Management (Architecture, Project Management, Development, and Quality Assurance). 
- IT Risks & Cybersecurity Services. 
- Platforms Management. 
- Data Analytics and AI. 
- Operations. 
 
Our offices are in Spain (Madrid) and Portugal (Lisbon, Porto). The company brings together over 200+ employees, with expertise in various technologies (Java, .Net, Python, Tibco, APIGee) and other operational roles (Functional Analyst, Project Manager, Business Analyst, Auto Stock Financing operators). We keep growing!  
 
Our consistent track record of services delivery means comfort for our customers and opportunities for our employees.  
 
You will find SE.T Iberia to be full of energy and an Inclusive Workplace in which you truly can make a difference.  
 
Would you like to join our international team that delivers end-to-end solutions (applications and operations activities) to businesses of BNP Paribas Personal Finance Group entities around the world?  
 
In a context, we are looking for an IT Risk Analyst to join ur team.

Mission

For the two PF GSL Shared Service Centers (SSCs), SE.T (Madrid) and CE.T (Bucharest), you will have the following responsibilities: 

  • Identify the potential IT & Cyber risks inherent to the activity.
    • Identify and monitor the ICT risks in the organization and in the services delivered by the SSCs
    • Assess risks by calculating probability of occurrence and the IT and business impacts and identify and take into account the mitigation measures (control plans, monitoring programme of the IT & Cyber risk management system, etc.)
    • Support initiatives to ensure IT risks are taken into account and addressed.
  • Contribute to the various IT & Cyber risk assessments and control exercises and reviews.
  • Ensure reporting of IT & Cyber risk management providing a consolidated view of IT & Cyber risks and producing reports and indicators on IT risks.
  • Ensure the correct application of the Third Party and Technology Risk management procedures:
    • Qualify any new or renewal of an externalized service
    • Ensure the proper governance of the third party ICT Risks.
    • Inclusion and negotiation of the security contractual clauses
    • Follow-up of the remediation activities.
    • Take part of the different committee with the provider and lead internal committee

IT Tools

  • Good knowledge of IT Risk and cybersecurity frameworks (ISO27k, NIST, DORA).
  • Knowledge of IT Risk analysis
  • GRC tools (ServiceNow)

What we are looking for

  • Minimum 2 years of proven working experience in IT Risk management and cybersecurity activities.
  • Knowledge of the management of IT Risk of the third-party providers.
  • Knowledge of Application security.
  • Open and team-oriented profile rather than highly technical.
  • Advanced student/graduate of a computer science related career (nice to have).
  • Autonomy and time management.

Language skills

  • English: B2 or higher (oral and written) - mandatory.
  • French: Nice to have level B1 or higher, but a plus.

Skills

BUSINESS

  • Knowledge of banking and banking processes will be a plus.

TRANSVERSAL SKILLS

  • Experience in Agile methodologies (Scrum, Kanban).

BEHAVIORAL SKILLS

  • Ability to understand, explain, and support solution evolutions.
  • Ability to meet objectives / Result orientation.
  • With attention to detail/ Rigorous.
  • Collaboration and teamwork.

Benefits:  
* Training programs, career plans and internal mobility opportunities, national and international thanks to our presence in different countries. 
 * Diversity and Inclusion Committee that ensures an inclusive work environment. In recent years, several employee communities have been created to organize diversity and inclusion awareness actions (PRIDE, We Generations and MixCity). 
 * Corporate volunteering program (1 Million Hours 2 Help) in which employees can dedicate time out of their working hours to volunteer activities. 
 * Flexible compensation plan 
 * Hybrid telecommuting model (50%) 
 * 31 vacation days. 
  
Diversity and Inclusion commitment  
 
BNP Paribas Group in Spain is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity/paternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency, which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients. 

About Our Culture
 
We are proud to create, maintain, and develop strategic business applications for BNP Paribas Personal Finance entities worldwide, maintaining high service levels and delivering added value to our customers. In our multicultural environment, we encourage all team members to develop their talents and skills, providing a wide variety of career opportunities and internal mobility programs within local SET teams or across other entities in the Group, both in Spain and globally.
 
We value the experience of our employees and work to maintain a balanced environment, offering flexibility regarding work schedules and respect for personal time. Our hybrid working model is a testament to our belief that social connection enhances our daily activities.