Chat us
Call us
Job Title: Operational Risk Officer - ICT Controls Testing
Department: Group RISK ORM
About Business line/Function:
The Group RISK ORM Network Operational Risk Officer is part of the Group RISK Function within BNP Paribas. The department has responsibility for steering and reporting on the Group’s Operational Risk Management framework and status. It is the independent second line of defense on operational risk management activities of the Group, such as on Information and Communication Technology risk management activities.
Position Purpose:
RISK Operational Risk Management (RISK ORM), created early 2021 to oversee operational risks within the mandate of the RISK function, is organised, under the responsibility of the Group Chief Operational Risk Officer (Group CORO), around 3 Poles: RISK ORM Framework, RISK ORM Technology & Transversal Risks and RISK ORM Network. Under the authority of the Pole’s Manager, RISK ORM Network is made up of all the Operational Risk Officers (OROs) acting as the second line of defence (LoD2) within the Group’s operational entities (Poles, Business Lines, Functions, Transversal Activities). The below requirement is for Operational Risk Officer- ICT Controls Testing job which part of the Common ICT LoD2 Controls Execution Platform (CICEP) under Group RISK ORM Network team. The person will be part of The Bank’s 2nd line of defense function, and they will be accountable for testing the deployment, and effectiveness of the IT and Cyber controls globally. The position is based in India Solutions Pvt. Ltd. (ISPL), Mumbai and reports to the Head of CICEP (India CoE), plus functionally to Group Head of ICT Controls Testing. Core success of the CICEP relies on creating trusted partnerships with stakeholders and particularly with the ORM Network community and globally, with all entities of the Group.
Responsibilities
Direct Responsibilities
· Carry out the independent testing of ICT controls (ITGC controls testing) to determine the design effectiveness, and operating effectiveness of IT and Cyber controls.
· Contribute to the industrialization and automation of RISK ORM ICT control testing services by development of methodologies / tools for the achievement of assignments.
· Draft high-quality reports containing the assessor’s opinion on the ICT control gaps, and recommendations for improvement, post completion of an assignment.
· Review and assist with the evaluation of control deficiencies and deliver practical recommendations for remediation.
· Recognise areas of improvement for ICT control testing and assist with the enhancement of the methodologies / tools for carrying out the ICT controls testing assignments.
· Guarantee completion of the testing and adherence to the internal timelines.
· Deliver IT and cyber risk management consultancy (specific to ICT controls) to business and IT stakeholders.
· Work in collaboration with other stakeholders from business and RISK ORM teams to contribute towards influencing the ICT risk culture of The Bank
· Upgrade the effectiveness of the Internal Controls programme by reviewing the control environment, risk assessment process, control activities, information and communication and monitoring activities
Contributing Responsibilities
· Collaboration at the India CoE level with Head of India CoE, such as but not limited to the CoE level reporting expectations
· Productively contribute to the CoE, RISK India Hub and ISPL on Group mandates, Objectives and priorities
· Help and contribute to develop the CoE as a positive place to work
Technical & Behavioral Competencies
Competencies, EXPERIENCE AND COMPETENCIES
Abilities Required
· 5-9 years of background in IT audit / ITGC controls testing / technical assessments, preferably in the areas of Cyber and Technology domains in a financial institution.
· Must be able to interface and liaise work efficiently, and productively with business partners.
· Strong analytical competencies - being able to come to a thoughtful and business focused conclusion quickly.
· Good communication, listening and influencing abilities, such as aptitude to articulate multi-layered issues and incorporate feedback.
· Capacity to handle their workload independently to meet their targets, and priorities set in conjunction with management.
· Demonstrating a calm professional approach, with a good understanding of delivery within time constraints and the need to escalate/inform departmental management as appropriate.
· Adapting personal approach to suit situations, individuals, groups and cultures. Is flexible in relation to getting the job done.
· Being rigorous and thorough - especially when logging and tracking issues through to conclusion.
· Demonstrating a high-level of commitment and self-motivation, combined with enthusiasm and a genuine interest in the post of Risk Assessment in business.
· Capacity to express views clearly and fluently, both orally and in writing. Considers the audience, avoiding technical jargon wherever necessary and appropriate.
· Works iteratively, producing quickly and frequently to produce high quality documents and outputs which require little to no rework.
· Team player - specialise in the success of the whole team. Working well both with others, as well as individually.
· Capacity to work under strict timelines and at pressure situations to handle the delivery.
· Open to work under global time zones as required for workshops or stakeholder discussions.
Abilities Preferred
· Has the proven capacity to think outside of the box, challenge industry norms and adapt quickly to evolving expectations.
· Is self-aware, anticipates problems, adapts and meets them head on.
· Sound stakeholder management, relationship developing, influencing, facilitating and presenting competencies.
· Is solutions focused - measures their output on whether issues, problems or challenges are resolved as a criteria for success.
Competencies:
· University degree (technical), and/or certification such as ISO27001, CISA.
· Professional qualifications/trainings relevant to technology and/or cyber risk (e.g. change management, outsourcing, vulnerability management, cloud security etc.).
Conduct:
· Consider the implications of your actions on colleagues, partners and client organisations before making decisions, and escalate issues to your manager when unsure.
Specific Qualifications:
· University degree (technical), and/or certification on Risk Management
Capabilities Referential (Required know-how, abilities and abilities)
Behavioral Capabilities:
Transversal Abilities:
Education Level: Bachelor Degree or equivalent
Location: Mumbai
Other/Specific Qualifications: Professional qualifications/trainings relevant to Information Security, Risk Management (ISO 27001, ISO 3100, CISA) preferred
About BNP Paribas Group:
BNP Paribas is the European Union’s leading bank and core player in international banking. It operates in 65 countries and has nearly 185,000 employees, among them more than 145,000 in Europe. The Group has main positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses covering BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional client organisations. Based on its solid diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional client organisations) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model throughout several Mediterranean countries, Turkey, and Eastern Europe. As a core player in international banking, the Group has leading platforms and business lines in Europe, a sound presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, allowing it to contribute to the construction of a sustainable future, while securing the Group's performance and stability.
About BNP Paribas India Solutions:
Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union’s leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas spanning the Group. Driving innovation and expansion, we are harnessing the potential of over 10000 employees, to deliver support and shape best-in-class solutions.
Commitment to Diversity and Inclusion
At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment chance for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is core to our success in serving our client organisations and the communities we operate in. As a global Bank, we truly believe that inclusion and diversity of our teams is main to our success in serving our clients and the communities we operate in.
This Operational Risk Officer-ICT Control Testing vacancy is based in Mumbai.
Eligibility typically includes the qualifications and experience outlined in the job description above, with around 0-5 Years years of relevant experience expected for this role.
The key responsibilities for this role are detailed in the Key Responsibilities section above, covering the core duties expected of a Operational Risk Officer-ICT Control Testing at BNP Paribas.
This role requires around 0-5 Years years of relevant experience, as specified in the job listing. Please refer to the Qualifications & Experience section above for full details.
Skills relevant to this position are outlined in the Qualifications & Experience section above. In general, strong communication, domain knowledge, and the ability to meet role-specific targets are valued across similar BFSI positions.
You can apply directly using the Apply Now button on this page, which will take you to BNP Paribas's application process for this role.