About the job

South Europe Technologies is one of BNP Paribas Personal Finance shared services centers delivering the best IT Solutions to BNP Paribas Personal Finance entities around the world:

  • Applications Management (Architecture, Project management, Development, and Quality Assurance)
  • IT Risks & Cybersecurity services
  • Platforms management
  • Ad-hoc, T&M development

In this context, we are looking for an IT Risks & Cyber SSC Engineer.

The Shared Services Centre Engineer consolidates administrative functions to deliver IT Risks and Cybersecurity services in a cost-effective manner, promoting operational efficiencies and services improvements, while reporting on the performance of the services to different levels in the organization.

As an IT Risks & Cyber SSC Engineer, your will support local entities of BNP Paribas Personal Finance all around the world.

Main responsibility:

A non-exhaustive sample of key IT Risk & Cyber operational processes and activities to contribute to are : Vulnerability management, Penetration tests, Identity & Access Management, 3rd-party due diligence, Monitoring of risk treatment (action plans), Reporting the risk exposure (by asset, by entity, by territory…), etc.

A large focus is given to Cybersecurity risks (a major threat in IT) and therefore you should demonstrate sufficient proficiency in this domain. But the absence of deep Cyber expertise can be compensated by a large culture and practice of risk management in all domains of IT Operational risks : risk identification, assessment, treatment, monitoring, reporting, concepts of risk appetite/tolerance/exposure, risk heatmaps, risks in projects, in change, outsourcing, legal & compliance risks...).

In this context

  • You will provide advice and user support across the Organization on the use of IT Risk and Cyber tools and systems.
  • You deliver IT Risk & Cyber services in contribution to identification, evaluation, treatment, monitoring, reporting and closing of IT operational risks.
  • Deliver various IT Risk&Cyber services in response to local entities’ requests, ensuring achievement of agreed service levels (on-time delivery, quality, exhaustiveness, accuracy...), compliance with established policies.
  • Establish a strong, long term and trust-based relationship with local entities and central team (located in Paris).
  • The initial services to be delivered will be related to Vulnerability Management (based on internal and external scans + ad hoc alerts), coordination of pentests, 3rd-party due diligence, risk exposure reporting, advisory and monitoring of risk mitigating actions. In a second phase, risk assessments of applications, processes or 3rd-parties, including onsite audits.
  • Deliver IT Risk & Cybersecurity services according to defined processes, in full respect of SLAs, ensuring that all standards are met and procedures are followed.
  • Establishes priorities and schedules of main activities.
  • Seek to improve, contribute to identify trends and problem areas, reporting on risks, key performance indicators and propose corrective action or new approaches having improvement of services as final goal.
  • Seek to help, propose solutions, promote BNPP Group standards in response to entities raised issue. If required, supports system deployment activities to ensure smooth adoption by clients of the Centre. Never leave questions without an answer.
  • Seek for expertise, be the recognized and sought advisor, define your best area(s) of expertise and promote it.
  • Seek for building trust and long-term relationship via definition and respect to SLAs, accurate proposals and swift reaction to requests, and also close working relationships with functional Divisions/Offices at HQ, liaising on issues in the implementation of established policies, procedures and solutions.

What it is in for you:

  • A great international team providing services all around the world for BNP Paribas Personal Finance subsidiaries
  • Good perspective for growth: Service catalog is enlarged year after year in order to fulfil all the needs of BNP Paribas Personal Finance entities.

Profile and Skills to Success

Business Skills

  • Cybersecurity knowledge
  • Auditing or governance risk and controls
  • NIST CyberSecurity Framework (NCF) or ISO/IEC27001 and best practices such as OWASP
  • Budget Steering

Behavioural Skills

  • Attention to detail / Rigour
  • Ability to synthetize / Simplify
  • Communication skills – Oral & written
  • Ability to share / Pass on knowledge

Transversal Skills

  • Analytical ability
  • Ability to set up relevant performance indicators
  • Ability to manage a project

Tools – Methodologies – Technologies

  • MS Office Pack Microsoft
    • Excel
    • Word
    • Powerpoint

Language skills:

English: Fluent (C1 Level minimum)

Nice to have:

Autonomy, Planning skills, Team worker, Understanding of information security and cyber risks related to the banking sector.

Certifications such as CISM, CISA, ISO27001 LI/LA, CISSP

Primary Location
ES-MD-Madrid
Job Type
Estándar
Job
INFORMATION TECHNOLOGY
Experience Level
Al menos 3 años
Schedule
Tiempo completo
Reference
CET-000686

Discover the different professions within BNP Paribas: IT, Tech and Data

BNP Paribas is not just a financial services group. We’re also a tech company. Information systems, data and tools are central to our DNA, and offer a very broad range of career opportunities!

Find out more

Why should I apply?

Basically, why would you want to join BNP Paribas over any other company?

BECAUSE YOU'RE THE KIND OF PERSON WHO WANTS...

  • What if we told you that working in our Group isn’t quite what you might think? At BNP Paribas, we do a multitude of different jobs that are constantly evolving to meet the expectations of our clients and society as a whole. Whether through everyday tasks or major projects, doing one of our jobs means making a personal commitment to taking sustainable action.

  • Feeling good about your job means bringing your whole self to work and being who you are. It’s also about having the resources you need to achieve a healthy work-life balance. Both of these are major commitments at BNP Paribas.

  • At BNP Paribas, developing your skills is as important to us as it is to you. And the skills you learn with us will help you through the rest of your working life.

Find out more