CYBERSECURITY AND IT RISK ENGINEER, MADRID

Cybersecurity and IT Risk engineer
GROUP BNP PARIBAS

BNP Paribas Group is the top bank in the European Union and a major international banking establishment. It has close to 185,000 employees in 65 countries. In Spain we are more than 5,100 employees within 13 business lines.

Personal Finance

BNP Paribas Personal Finance, through its brand Cetelem, specialises in consumer credit, personal loans and card management. It is a financial partner of major retailers, consumer goods companies and car dealerships, as well as a benchmark in market analysis thanks to the Cetelem Observatory studies. BNP Paribas Personal Finance has 20,000 employees serving more than 20 million customers.

Cybersecurity and IT Risk engineer (SecOps Support)

About the job

Solid reputation, passionate individuals, and endless opportunities. Thats SE.T BNP Paribas Personal Finance International Shared Service Center.

Our consistent track record of services delivery means comfort for our customers and opportunities for our employees.

You will find SE.T to be full of energy and an Inclusive Workplace in which you truly can make a difference.

Would you like to join our international team that delivers end-to-end solutions (applications and operations activities) to businesses of BNP Paribas Personal Finance Group entities around the world?

In a context of maintaining the high level of existing activities while growing the number of international customers, we are looking for our Cybersecurity and IT Risk engineer (SecOps Support)

As a Cybersecurity and IT Risk engineer, you will be responsible for providing Cybersecurity and IT Risk services related to SecOps to IT corporate Risk Team in France (in French and English), and to international Entities of BNPP.

The main responsibilities are:
- DLP alerts: assess, produce dashboard, follow-up of different related subjects
- Flow validations / debug, flow analyses: Firewall, Proxy, WAF
- Right management: Admin right, USB right
- Security contribution for projects:- Technical actions and security contribution during separation / fusion of entities
- Analysis with network teams to resolve blocking points

- Security analysis for new web tools
- Exceptions management: Asses the security risk with the requester to generate the risk level and formalize through risk card.
- Process / documentation update
- Identity and Access Management: onboarding of applications, rights and user into a IAM tool (Myaccess), expertise, support to requestors and proof collections for internal audits
- Privileged Access Management: Management of nominatives, generic and services accounts
- Produce Dashboard, Procedures, Validations on different tools

What we are looking for:
- Advanced student/graduate of a computer science related career
- Knowledge of standards as OWASP, ISO/IEC27001, ISO 22301, ISO3100 and best practices
- Dev skills (nice to have), Knowledge of Application security
- Proven working experience in the cybersecurity field (SecOps)
- Network security
- General security background
- DLP
- IAM/PAM
- Web security (nice to have)
- Stress management
- Curious and propose solutions.
- Capacity to manage several projects in parallel and respect the deadlines.
- Autonomy and time management
- Customer results-oriented (service delivery will be the heart of the activity)
- Ability to communicate and report to different levels in the organization
- Proactivity
- Motivated to pick up new skills as you go
- Analytical and problem-solving skills
- Structured analyst, capable of embracing and using data analytics to assess risks,
- Scope audits and test controls
- Team worker
Skills:

BUSINESS SKILLS

Business/IT Relationship

IT Knowledge

BEHAVIOURAL SKILLS

Personal Impact / Ability to influence motivate

Proactivity

Organizational skills

TRANSVERSAL SKILLS

Ability to manage/facilitate a meeting, seminar, committee, training...

Ability to inspire others generate peoples commitment

Ability to anticipate business/strategic evolution

LANGUAGES

English (Fluent): B2 or higher

French (Fluent): B2 or higher

Who are we?

We are South Europe Technologies (S.ET) the IT, Data and Operations Shared Service Center of BNP Paribas Personal Finance, with delivery centers in Spain and Portugal, providing the best solutions to BNPP PF entities around the world such as Cetelem (specialized, between others, in financial partnership of major retailers, consumer goods companies and car dealerships).

Among other services, our portfolio is composed of:

Applications Management (Architecture, Project Management, Development, and Quality Assurance).

IT Risks Cybersecurity Services.

Platforms Management.

Data Analytics and AI.

Operations.

Our offices are in Spain (Madrid) and Portugal (Lisbon, Porto). The company brings together over 200+ employees, with expertise in various technologies (Java, .Net, Python, Tibco, APIGee) and other operational roles (Functional Analyst, Project Manager, Business Analyst, Auto Stock Financing operators). We keep growing!

Ciberseguridad,

Ciberseguridad,