Assistant Manager - Application Security

The bank for a changing world The BNP Paribas Group Find here the essentials on BNP Paribas: governance, strategy, organisation and key figures. Our commitments We are committed to make a sustainable and inclusive contribution to the environmental, societal, technological and economic challenges of our time. News & Mediaroom Our financial results, business activites, solutions and recent sustainable finance initiatives: news, analysis and viewpoints. News Our financial results, business activites, solutions and recent sustainable finance initiatives: news, analysis and viewpoints. Mediaroom Our financial results, business activites, solutions and recent sustainable finance initiatives: news, analysis and viewpoints. Careers Our ambition ? To build a sustainable future. But we can’t do that without you! Want to be part of the change? Choose your profile You are Assistant Manager - Application Security Job Title: Assistant Manager Department : CIB Security & IT Risk About Business line/Function: Information security and BCM team are responsible for performing the security assessment of all new/existing infrastructure and application projects. Also, responsible for assessing the business continuity requirement of each team and project based on the criticality and streamline the process to achieve the requirement. Position Purpose: The purpose of this position is to lead a high‑performing, multidisciplinary security team and shape the future of secure software delivery across the organization. Drive tangible impact through measurable security outcomes, automation, and innovation. Responsibilities Direct Responsibilities - Review and interpret various application classifications and their architectures (e.g., web apps, APIs, infrastructure, server side, mainframe, WebSphere). - Demonstrate solid knowledge of data in transit and data at rest encryption, TLS (certificates, cipher suites such as RSA and Diffie Hellman), middleware message queues, secure file transfers, and database encryption. - Good Understanding of access control concepts, including onboarding, automated provisioning/reconciliation, and privileged access management tools (e.g., SailPoint, CyberArk). - Good Understanding of authentication best practices and familiarity with strong authentication mechanisms such as SSO, SAML, 2FA/MFA, Arcot, RSA, etc. - Possess a clear grasp of application security testing processes (DAST, SAST, SCA, penetration testing, VAPT) and the end-to-end workflow, even if hands on scanning experience is not required. - Good Understanding of payment specific applications (e.g., SWIFT messages), associated encryption of payment flows, mutual authentication, and end to end encryption. - Work closely with application/asset owners and technical teams to conduct security compliance reviews, gather functional information, and implement appropriate security controls with documented evidence. - Produce concise findings reports and discuss results with relevant Application owners & Stakeholders. - Demonstrated team‑management ability, preparation of management‑level reports, capability to interact with higher ups in management steering committee meetings and skilled in handling cross‑functional meetings to drive decisions and actions. - Mentor and onboard new team members through knowledge transfer sessions and hands on shadowing during their initial period. Contributing Responsibilities - Extended knowledge of IT infrastructure & Network and Application (Web, Client-Server, Payment Systems) security reviews - Provide consultation and recommendations on application security controls for the central region. Technical & Behavioral Competencies · Strong knowledge of application security framework and standards (OWASP TOP 10, NIST, SANS, ISO and relevant regulatory requirements) · Strong understanding of OWASP top 10, SAST/DAST/SCA, API security, secure coding practices, threat modeling, vulnerability management, cryptography techniques, authentication techniques (SSO, SAML, MFA/2FA, etc.), secure SDLC · Good communication skills · Knowledge of application security controls (Access control mechanisms and Data Security) · Should have IT audit background · Good knowledge of IT security (defense in depth) Specific Qualifications: Any technical certification (CEH/ISO27001/CISM/CISA/CISSP) will be a value addition Skills Referential ( Required knowledge, skills and abilities) Technical Skills: Behavioral Skills: Education Level: Bachelor degree or equivalent Location: Bangalore BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability. About BNP Paribas India Solutions: Commitment to Diversity and Inclusion Share this page! Cotation Publications Direct Access Follow us on The bank for a changing world Job Title: Assistant Manager Department : CIB Security & IT Risk About Business line/Function: Information security and BCM team are responsible for performing the security assessment of all new/existing infrastructure and application projects. Also, responsible for assessing the business continuity requirement of each team and project based on the criticality and streamline the process to achieve the requirement. Position Purpose: The purpose of this position is to lead a high‑performing, multidisciplinary security team and shape the future of secure software delivery across the organization. Drive tangible impact through measurable security outcomes, automation, and innovation. Responsibilities Direct Responsibilities - Review and interpret various application classifications and their architectures (e.g., web apps, APIs, infrastructure, server side, mainframe, WebSphere). - Demonstrate solid knowledge of data in transit and data at rest encryption, TLS (certificates, cipher suites such as RSA and Diffie Hellman), middleware message queues, secure file transfers, and database encryption. - Good Understanding of access control concepts, including onboarding, automated provisioning/reconciliation, and privileged access management tools (e.g., SailPoint, CyberArk). - Good Understanding of authentication best practices and familiarity with strong authentication mechanisms such as SSO, SAML, 2FA/MFA, Arcot, RSA, etc. - Possess a clear grasp of application security testing processes (DAST, SAST, SCA, penetration testing, VAPT) and the end-to-end workflow, even if hands on scanning experience is not required. - Good Understanding of payment specific applications (e.g., SWIFT messages), associated encryption of payment flows, mutual authentication, and end to end encryption. - Work closely with application/asset owners and technical teams to conduct security compliance reviews, gather functional information, and implement appropriate security controls with documented evidence. - Produce concise findings reports and discuss results with relevant Application owners & Stakeholders. - Demonstrated team‑management ability, preparation of management‑level reports, capability to interact with higher ups in management steering committee meetings and skilled in handling cross‑functional meetings to drive decisions and actions. - Mentor and onboard new team members through knowledge transfer sessions and hands on shadowing during their initial period. Contributing Responsibilities - Extended knowledge of IT infrastructure & Network and Application (Web, Client-Server, Payment Systems) security reviews - Provide consultation and recommendations on application security controls for the central region. Technical & Behavioral Competencies · Strong knowledge of application security framework and standards (OWASP TOP 10, NIST, SANS, ISO and relevant regulatory requirements) · Strong understanding of OWASP top 10, SAST/DAST/SCA, API security, secure coding practices, threat modeling, vulnerability management, cryptography techniques, authentication techniques (SSO, SAML, MFA/2FA, etc.), secure SDLC · Good communication skills · Knowledge of application security controls (Access control mechanisms and Data Security) · Should have IT audit background · Good knowledge of IT security (defense in depth) Specific Qualifications: Any technical certification (CEH/ISO27001/CISM/CISA/CISSP) will be a value addition Skills Referential ( Required knowledge, skills and abilities) Technical Skills: Behavioral Skills: Education Level: Bachelor degree or equivalent Location: Bangalore BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability. About BNP Paribas India Solutions: Commitment to Diversity and Inclusion