Tribe Security Officer
Based in Warsaw, hybrid working (50/50)
At least 5 years’ experience
English mandatory
About the Team
Arval Competence Centre Warsaw is the newest competence centre of the BNP Paribas Group, supporting Arval's international operations in 28 countries worldwide. We combine business expertise with technology to deliver efficient and innovative solutions across Credit Analysis, KYC, KYS, HR and IT. We bring together over 170 professionals collaborating in diverse teams to improve processes, support digital transformation and contribute to the Arval Group's success story!
In August 2025 ACCW welcomed Arval Technical Centre providing software development and cybersecurity expertise. ATC functions within the international Arval IT structure across France, the Netherlands, Poland, India, UK and many more.
Arval Cybersecurity & IT Risks CoE (Center of Expertise) aims at:
- Providing guidance on IT security and ensuring its implementation (through the information system security policy),
- Assessing risks, threats and their consequences and draw up a prevention plan,
- Making all ARVAL employees aware of cyber security,
- Providing recommendations to project managers on the security of their applications and deciding to audit some of them if necessary.
- Managing Cybersecurity incident through a dedicated CSIRT team, integrated in BNP Paribas CSIRT global organization.
Cybersecurity & IT Risks CoE team is composed of around 50 professionals, located today mainly in Rueil Malmaison France.
Duties - Responsibilities
We are looking for a Tribe Security Officer who will oversee GRC (Governance, Risk and compliance), security, IT risks, IT continuity within the perimeter of one or two tribes.
A tribe can have up to 100 agile members who design, develop, test and maintain a portfolio of applications.
This position will require autonomy, self-organization and mastering several processes.
Activities
Considered as «local CISO” for the perimeter for which it is responsible, the Tribe Security Officer will:
- Ensure the deployment of Arval’s security, continuity, IT risks and Third-party risk management policies in the tribe.
- Influence decisions in line with security objectives.
- Evaluate / formalize IT risks and mitigation measures
- Monitor remediation plans
- Promote security through DevSecOps concepts and ensure that applications are embedded in security tools when they are eligible (SAST, AVS, PENTESTS, SCA)
- Participate in the remediation of vulnerabilities
- Contributes to Sprint Planning and Backlog Review whenever required
- Provide reports on the security level / vulnerabilities of applications within its scope to the CoE IT Risk and Cyber Security
- Share best practices with the IT & Cyber Security central team and other Tribe Security Officers
- Provide evidence for internal control plan and audits
Expertise and skills
Business Skills
- IT Knowledge
- Cyber Security
- IT Risk Management
- Data Quality & Security
- Risk Anticipation, Monitoring
TRANSVERSAL SKILLS
- Analytical ability
- Ability to anticipate business / strategic evolution
- Ability to inspire others & generate people's commitment
- Ability to develop and leverage networks
- Ability to understand, explain and support change
BEHAVIOURAL SKILLS
- Ability to collaborate / Teamwork
- Autonomy and self-organization
- Creativity & Innovation / Problem Solving
- Adaptability
- Ability to Deliver / Results Driven
- Attention to detail / Rigour
COMMON BASE TOOLSmethodologies
- Specific to IT Risk & Ciber
Specific SKILLS
- Proven You have at least 5 years’ experience in GRC, audit, cyber security or IT risk management
- You are comfortable in the international environment and speak English fluently
- You're autonomous, agile, able to meet deadlines
- Certifications such as ISO27005,22301, CISPS will be a plus
Poste-type and Location
Arval Department: ACCW IT
BNP Paribas Job type: Tribe Security Officer
Location: Based in Warsaw (Poland)
We inform you that Arval Service Lease Polska Sp. z o.o. and Arval Competence Centre - Arval Service Lease Polska Sp. z o.o. Branch in Warsaw have an internal procedure for reporting breaches of law and taking follow-up actions (Whistleblowing Procedure), which is available on the Arval Service Lease Polska Sp. z o.o. website: https://www.arval.pl/ogolne/whistleblowing
