IT Operational Permanent Controller

The bank for a changing world The BNP Paribas Group Find here the essentials on BNP Paribas: governance, strategy, organisation and key figures. Our commitments We are committed to make a sustainable and inclusive contribution to the environmental, societal, technological and economic challenges of our time. News & Mediaroom Our financial results, business activites, solutions and recent sustainable finance initiatives: news, analysis and viewpoints. News Our financial results, business activites, solutions and recent sustainable finance initiatives: news, analysis and viewpoints. Mediaroom Our financial results, business activites, solutions and recent sustainable finance initiatives: news, analysis and viewpoints. Careers Our ambition ? To build a sustainable future. But we can’t do that without you! Want to be part of the change? Choose your profile You are IT Operational Permanent Controller Job Title: Assistant Manager - IT OPERATIONAL PERMANENT CONTROLLER Department : ISPL- BNP Personal Finance About Business line/Function: BNP Paribas Personal Finance is financial entity specializing in consumer credit and banking as a service. Through our strong partners we distribute financial products on B2C, B2B2C and B2B models for different business lines. Inside Personal Finance, SET Iberia is an IT & Operations hub, providing IT, Data, Cybersecurity and Operations services to Personal Finance corporation, filières and subsidiaries. Position Purpose: The IT OPC ensures the effective and sustainable operation of the ICT operational risk and permanent control framework across SET and CET. The role acts as the LoD1 focal point for identifying and assessing ICT operational risks, coordinating and executing permanent controls, managing ICT operational incidents, monitoring remediation plans, maintaining procedures and providing reliable reporting to management and relevant control functions. Responsibilities Direct Responsibilities 1. ICT operational risk assessment and RCSA · Ensure that the ICT risk taxonomy and the relevant process and organization mappings are maintained and appropriately applied. · Coordinate the identification and self-assessment of material ICT operational risks and associated risk mitigants. · Ensure consistency between RCSA results, control plans and remediation actions, and support their validation by the relevant management bodies. · Maintain the RCSA on an ongoing basis and provide consolidated views of risk exposure, control coverage and outstanding remediation. 2. Permanent control framework · Plan, organize, perform and/or coordinate ICT permanent controls in accordance with the approved control plan. · Assess the completeness, quality and traceability of control evidence and ensure that results are recorded in the applicable Group tools. · Analyze control results, identify weaknesses or recurring issues and coordinate proportionate corrective action plans. · Monitor action plans through closure, escalating delays, blockers or material residual risks when appropriate. 3. ICT operational incidents · Ensure ICT operational risk incidents are identified, collected, declared and updated in the Group operational risk tool in a timely manner. · Coordinate incident analysis with process owners and relevant experts, including root cause, impact, control failure and lessons learned. · Ensure corrective and preventive measures are defined, assigned and monitored, including the follow-up of significant incidents. · Maintain consistency between operational incident records, IT incident-management information and related remediation plans. 4. Procedures and governance · Maintain an inventory of applicable IT procedures and coordinate their local deployment, adaptation or update when required. · Ensure procedures, control requirements and responsibilities are communicated to relevant stakeholders and supported by adequate evidence. · Contribute to IT governance and internal control committees, providing accurate status, alerts, decisions and action tracking. · Act as a key interface with IT Risk, Cybersecurity, IT Governance, process owners, management, audit and the relevant second-line control functions Contributing Responsibilities · Team player · Adhere to the standards and practices followed in the Project · Communicate with the cross teams and perform the integration testing of the code developed Technical & Behavioral Competencies · Prior experience on OPC practices · Strong knowledge on the below parameters: · Operational risk management and permanent control principles · ICT risk assessment, control design and remediation tracking · IT governance processes and Group procedure deployment · Incident analysis, audit support and evidence management · Good understanding of IT operations, cybersecurity and IT service-management processes · Operational risk and GRC tools such as Risk360 and ServiceNow/GRC · Reporting and data-analysis tools used within the organization Specific Qualifications: • Minimum 5 years of experience along with Bachelor's Degree - in IT, Computer related field or equivalent experience. Skills Referential ( Required knowledge, skills and abilities) Other Skills: - Agile methodology exposure - Knowledge of banking products is a nice to have - Proactive mindset Behavioral Skills: · Strong analytical and synthesis skills · High attention to accuracy, traceability and documentation quality · Ability to coordinate multiple stakeholders and challenge constructively · Clear written and oral communication, including management reporting · Ability to facilitate meetings, controls, risk reviews and awareness sessions · Continuous improvement and problem-solving mindset Education Level: Bachelor Degree or equivalent Location: Chennai BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability. About BNP Paribas India Solutions: Commitment to Diversity and Inclusion Share this page! Cotation Publications Direct Access Follow us on The bank for a changing world Job Title: Assistant Manager - IT OPERATIONAL PERMANENT CONTROLLER Department : ISPL- BNP Personal Finance About Business line/Function: BNP Paribas Personal Finance is financial entity specializing in consumer credit and banking as a service. Through our strong partners we distribute financial products on B2C, B2B2C and B2B models for different business lines. Inside Personal Finance, SET Iberia is an IT & Operations hub, providing IT, Data, Cybersecurity and Operations services to Personal Finance corporation, filières and subsidiaries. Position Purpose: The IT OPC ensures the effective and sustainable operation of the ICT operational risk and permanent control framework across SET and CET. The role acts as the LoD1 focal point for identifying and assessing ICT operational risks, coordinating and executing permanent controls, managing ICT operational incidents, monitoring remediation plans, maintaining procedures and providing reliable reporting to management and relevant control functions. Responsibilities Direct Responsibilities 1. ICT operational risk assessment and RCSA · Ensure that the ICT risk taxonomy and the relevant process and organization mappings are maintained and appropriately applied. · Coordinate the identification and self-assessment of material ICT operational risks and associated risk mitigants. · Ensure consistency between RCSA results, control plans and remediation actions, and support their validation by the relevant management bodies. · Maintain the RCSA on an ongoing basis and provide consolidated views of risk exposure, control coverage and outstanding remediation. 2. Permanent control framework · Plan, organize, perform and/or coordinate ICT permanent controls in accordance with the approved control plan. · Assess the completeness, quality and traceability of control evidence and ensure that results are recorded in the applicable Group tools. · Analyze control results, identify weaknesses or recurring issues and coordinate proportionate corrective action plans. · Monitor action plans through closure, escalating delays, blockers or material residual risks when appropriate. 3. ICT operational incidents · Ensure ICT operational risk incidents are identified, collected, declared and updated in the Group operational risk tool in a timely manner. · Coordinate incident analysis with process owners and relevant experts, including root cause, impact, control failure and lessons learned. · Ensure corrective and preventive measures are defined, assigned and monitored, including the follow-up of significant incidents. · Maintain consistency between operational incident records, IT incident-management information and related remediation plans. 4. Procedures and governance · Maintain an inventory of applicable IT procedures and coordinate their local deployment, adaptation or update when required. · Ensure procedures, control requirements and responsibilities are communicated to relevant stakeholders and supported by adequate evidence. · Contribute to IT governance and internal control committees, providing accurate status, alerts, decisions and action tracking. · Act as a key interface with IT Risk, Cybersecurity, IT Governance, process owners, management, audit and the relevant second-line control functions Contributing Responsibilities · Team player · Adhere to the standards and practices followed in the Project · Communicate with the cross teams and perform the integration testing of the code developed Technical & Behavioral Competencies · Prior experience on OPC practices · Strong knowledge on the below parameters: · Operational risk management and permanent control principles · ICT risk assessment, control design and remediation tracking · IT governance processes and Group procedure deployment · Incident analysis, audit support and evidence management · Good understanding of IT operations, cybersecurity and IT service-management processes · Operational risk and GRC tools such as Risk360 and ServiceNow/GRC · Reporting and data-analysis tools used within the organization Specific Qualifications: • Minimum 5 years of experience along with Bachelor's Degree - in IT, Computer related field or equivalent experience. Skills Referential ( Required knowledge, skills and abilities) Other Skills: - Agile methodology exposure - Knowledge of banking products is a nice to have - Proactive mindset Behavioral Skills: · Strong analytical and synthesis skills · High attention to accuracy, traceability and documentation quality · Ability to coordinate multiple stakeholders and challenge constructively · Clear written and oral communication, including management reporting · Ability to facilitate meetings, controls, risk reviews and awareness sessions · Continuous improvement and problem-solving mindset Education Level: Bachelor Degree or equivalent Location: Chennai BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability. About BNP Paribas India Solutions: Commitment to Diversity and Inclusion