Business Overview:
The US/Americas IT CCO (Chief Control Office) department covers the following areas: IT & Cyber GRC (Governance, Risk and Controls), 1LOD Reviews, Program Management, ITO Chief Data Office, and Voice and Record Keeping Program. As part of CCO team we ensure:
- The management of governance, risk, and controls for the key IT & Cybersecurity activities.
- The oversight of all IT & Cybersecurity internal and external audits, and regulatory examinations.
- The predictive sustainability management of the control framework.
- The ITO data management of record keeping and disposal, trade regulatory reporting and voice & e-Com record keeping.
Candidate Success Factors:
Candidates are measured on the following four performance drivers, which will dictate how individual impact is considered on the Americas platform:
- Results and Impact
- Able to influence peers and team.
- Demonstrates good judgement when making decisions of high complexity and impact.
- Exercise appropriate autonomy in the execution and delivery of work.
- Responsible for driving outcomes, which have meaningful effect on team or department.
- Leadership and Collaboration:
- Creates trust with colleagues.
- Acts in leadership capacity for projects, processes, or programs.
- Client, Customer and Stakeholder Focus:
- Able to build relationships with a mix of colleagues and clients.
- Interacts regularly with management and department leaders.
- Demonstrates the ability to influence stakeholders at the team level.
- Compliance Culture and Conduct:
- Takes full responsibility for personal actions and demonstrates courage in facing problems and conflicts.
- Perceived as a person of high moral character; upholds corporate values and displays high ethical standards.
About the Job:
The Head of Regulatory Exam Oversight is an seasoned leader with in-depth knowledge and experience in IT risk & controls, across the whole IT value chain (infrastructure, Application Development and Support, IT services), as well as excellent understanding of Corporate and Investment Banking business and activities. The role consists in managing a team of IT staff with the objective of developing and maintaining a strong first line of defense audit practices, overseeing the lifecycle of all audits / examination from second line of defense, third line of defense, third parties and regulators from pre-assessment to remediation.
The role will lead the predictive risk analytics team responsible to strengthen the risk and control framework of the IT & Cyber platform, through risk modeling leveraging all data available and enable to ove from a reactive to a pro-active approach.
The candidate must demonstrate hands-on experience in managing complex regulatory examinations and remediation, with excellent communication skills and a capacity to work hand-in-hand with key stakeholders at C-suite level. This role requires to work under pressure with non-negotiable timelines. The Head of Regulatory Exam Oversight reports to IT Chief Control Officer.
Responsibilities:
- 1LOD Reviews:
- Perform independent regular reviews on existing IT & Cyber processes based on self-identified weaknesses, or identified through audits / examination, or through the results of predictive risk analytics
- Make recommendations towards management to reinforce the control framework
- Closely partner with CISO, CIO and CISO to support them in identifying and remediating their weaknesses
- Audit and Examination Governance:
- Develop and maintain the audit and examination framework
- Put in place adequate reporting and escalation governance with all stakeholders
- Coordinate with Supervisory Group (SRG) any communication from / to the regulator
- Report to Senior Management and Board of Directors on a regular basis
- Audit and Examination Oversight and Remediation:
- Steer the governance of all internal and third-party Audit
- Steer the governance of all regulatory examinations
- Oversee the remediation of all internal and third-party findings towrdas the CIO, CTO and CISO
- Partner with the head of program management for the delivery of key remediation program
- Predictive Risk Analytics:
- Develop and maintain risk models using predictive modeling techniques to identify trends and potential IT & Cyber risks across the organization
- Work closely with cross-functional teams, including CIO, CISO and CTO to integrate predictive risk strategies into operational practices
- Monitor industry trends and advancements in predictive analytics to enhance risk and control management approaches and methodologies
Minimum Required Qualifications:
- Minimum of 20 years of relevant experience in Information Technology audit and IT Risk & Controls
- Proven experience in audit, risk management, predictive analytics, or data analysis, ideally 5+ years in a similar role.
- In-depth knowledge of regulatory examination practices (e.g. FRB, FINRA, SEC)
- In-depth knowledge of various IT & Cyber framework (e.g. FFIEC, NIST, ITIL)
- Broad understanding and / or hands-on experience on IT processes and technologies
- Experience working in large global financial services organization (preferably Investment Banking)
- Hands of management experience.
- Ability to:
- Manage and arbitrate conflicting priorities
- Demonstrate strategic thinking and creativity while delivering tangible results
- Excellent communication skills (verbal, written, presentation) towards Management and Boards of Directors
- Proficient in Microsoft Word, Excel, PowerPoint and SharePoint
Preferred Qualifications:
- Bachelor or Master of Science / Engineering, ideally in computer science
- Any of the CRISC, CISA, CIA, CISM, CISSP Certifications are valued
FINRA Registrations Required:
CFTC Swap Dealer Associated Person (if yes, NFA Swaps Proficiency Program is required):
SEC Security-Based Swap Dealer Associated Person:
While the description above describes our ideal candidate, we encourage applicants to apply even if they do not fully meet the complete list of qualifications noted.
The expected starting salary range for this position is between $220,000 to $345,000 annually. The actual salary may vary based upon several factors including, but not limited to, relevant skills/experience, time in role, base salary of internal peers, prior performance, business line, and geographic/office location.
In addition, our comprehensive benefits package aims to support our employees in various aspects of their lives. From healthcare and wellness programs to retirement plans and childcare services, we prioritize the well-being and growth of our employees. Our benefits include medical, dental and vision coverage, a 401(k) Savings Plan, backup childcare, life, accident and disability insurance, mental health support and paid time off. Additional details about our benefits offerings, inclusive of eligibility for a discretionary bonus, will be provided during the hiring process.
About BNP Paribas:
BNP Paribas is a leading bank in Europe with an international reach across the US, EMEA and APAC. It has a presence in 65 countries, with nearly 190,000 employees. The bank employs over 3,500 people in offices in the US across 10 states including New York, Jersey City, Chesterbrook, PA, San Francisco, Boston, Chicago, Denver, Miami, and Washington, DC. BNP Paribas has built a strong and diversified presence to support its client base. We continue to grow and strengthen our commitment to the US market through our Corporate & Institutional Banking activities. We are one of a few non-US banks to offer a full value chain for our clients, from trading to financing, and clearing and custody in the US with the international footprint and capacity to deliver both globally and locally. Leveraging the strength of our European roots, our network can support clients in virtually every region of the world, enabling more connectivity and efficiency wherever our clients conduct business. We take pride in our expertise and our ability to adapt while constantly looking ahead to create a more sustainable world.
As an international company with a global footprint, the unique cultures and viewpoints of our team members are an integral part of the fabric of BNP Paribas. We are a company with a purpose - to be a responsible and sustainable global leader. We aim to create an environment where our employees feel empowered to drive change, make an impact and be true to themselves. We employ talented individuals from a wide variety of backgrounds, locally and globally, and are inspired by our employees who help us in cultivating a diverse, equitable and inclusive workplace through initiatives such as our Diversity, Equity & Inclusion (DEI) Leadership Forum and Employee Resource Group (ERG) communities. We strive to be a workplace where all team members can grow and thrive and offer robust training, development, and mentoring opportunities to make that vision a reality. Our leaders are deeply committed to DEI and highly accessible to our employees, consistently soliciting feedback on how we can continue to support our employees to reach their highest potential.
BNP Paribas. The Bank for a Changing World - https://usa.bnpparibas/en/homepage/join-us/our-opportunities/
BNP Paribas is committed to providing a work environment that fosters diversity, inclusion, and equal employment opportunity without regard to race, color, gender, age, creed, sex, religion, national origin, disability (physical or mental), marital status, citizenship, ancestry, sexual orientation, gender identity and gender expression, or any other legally protected status.
Protect yourself from fraudulent job postings. Emails about jobs at BNP Paribas will always come from addresses ending @bnpparibas.com @us.bnpparibas.com, @ca.bnpparibas.com, or @br.bnpparibas.com. You should be suspicious of emails regarding employment with BNP Paribas coming from any other domains and should not respond. BNP Paribas will never send payments to or request payments from candidates for positions posted by BNP Paribas.