THIRD PARTY RISK IT, MADRID

Third Party Risk IT
We are South Europe Technologies (S.ET) the IT, Data and Operations Shared Service Center of BNP Paribas Personal Finance, with delivery centers in Spain and Portugal, providing the best solutions to BNPP PF entities around the world such as Cetelem (specialized, between others, in financial partnership of major retailers, consumer goods companies and car dealerships).

Among other services, our portfolio is composed of:

Applications Management (Architecture, Project Management, Development, and Quality Assurance).

IT Risks Cybersecurity Services.

Platforms Management.

Data Analytics and AI.

Operations.

Our offices are in Spain (Madrid) and Portugal (Lisbon, Porto). The company brings together over 200+ employees, with expertise in various technologies (Java, .Net, Python, Tibco, APIGee) and other operational roles (Functional Analyst, Project Manager, Business Analyst, Auto Stock Financing operators). We keep growing!

About the job

Main responsibility:

Governance and management of IT Risk and Cybersecurity controls, your tasks would be to support cybersecurity assessments based on ISO 27001 Norm.

In this context, your functions will be:

Perform and coordinate meetings with stakeholders of different entities (customers).

Perform and coordinate meetings with stakeholders of third parties (auditees).

Evaluate the cybersecurity and risk management maturity level of third parties (auditees) which provides services to BNPP entities.

Review provided evidence supporting third party answers to a control questionnaire.

Prepare reports and consolidate the main risks identified.

What it is in for you:

A great international team providing services all around the world for BNP Paribas Personal Finance subsidiaries.

Good perspective for growth: Service catalog is enlarged year after year in order to fulfil all the needs of BNP Paribas Personal Finance entities.

What we are looking for:

You have minimum three years of proven working experience in the field (auditing or governance of IT and Cybersecurity risks and controls).

Student/graduated of a computer science related career.

Proven experience with the definition of action plans for identified risks.

Knowledge of standards like ISO27005 or ISO27001.

Understanding of information security and cyber risks related to the banking sector is a plus.

Certifications such as CISM, CRISK, CISA, ISO27001LA are a nice to have.

Structured analyst, capable to embrace and use data analytics to assess risks, scope audits and test controls

Customer and service oriented (service delivery will be the heart of the activity)
You are a Problem-Solving and Decision-Making person, who:

o Demonstrates advanced analytical and diagnostic skills dealing with issues that are ambiguous, lack known precedent or appear contradictory.

o Sees the big picture and is fully aware of technology and business directions.

o Has department, corporate and group objectives in focus while identifying and removing barriers.

Skills:

Behavioural Skills
Attention to detail / Rigour
Communication skills - Oral written
Planning skills

Transversal Skills
Analytical ability
Ability to manage a project
Critical thinking

Tools - Methodologies - Technologies

MS Office Pack Microsoft

o Excel

o Word

o Power Point

Language skills:

Proficient in English (Reading and writing - B2 minimum).

Proficient in French (Reading and writing - C1 minimum).

About our culture:

We are proud to create, maintain and develop business solutions for BNP Paribas Group entities around the world, while keeping a high level of service and providing added value to our customers.

Working in an Inclusive and Multicultural environment, we encourage everyone to develop their talents and skills, offering various career opportunities and internal mobility programs, within local SET teams or in other entities within the Group.

Ciberseguridad, CISM, CRISK

Ciberseguridad, CISM, CRISK