Digital Operational Resilience Risk Officer
BNP Paribas CIB
The global Operational Resilience program is a critical component in ensuring the Group’s ability to anticipate, prevent, detect, withstand, recover, and learn from operational disruptions that impact the delivery of vital services. This applies to cyber, technology, third parties, physical infrastructures, and people.
While Operational Resilience is the holistic approach to make vital services resilient, DORA (Digital Operational Resilience Act) focusses on the “Digital/ICT Risk” aspects of Operational Resilience.
As a Digital Operational Resilience Risk Officer, the individual will support the Global Lead of Business & IT Continuity and Third-Party technology Risk in the development and deployment of the wider Operational Resilience framework and governance from a Second Line of Defense (2LoD) perspective. The role will be focused on Operational Resilience Subject matter expertise on delivery of team objectives.
The position has a wide variety of subjects such as DORA, IT Resilience, Business Continuity and Third-party technology risk management.
The role also involves interactions within other RISK function teams such as Crisis Management, Entities Operational Risk Officers, and First Line of Defence (1LoD) operations. The role will be focusing on working with a broad set of stakeholders at the Group and Entities levels, making sure we have the capability to withstand incidents and still maintain our vital services.
Your Main Activities Are
Role
The role is key within the RISK ORM Operational Resilience team as it will contribute to the design, delivery and testing of Operational resilience 2LoD approach and framework on following missions:
- Support the Global Head of RISM ORM OpRes - Business & IT Continuity and Third-Party Technology Risk in oversight of Digital Operational Resilience, Business Continuity and Third-Party Technology Risk Management to the senior stakeholders across the Group.
- Provide a 2LoD Subject Matter Expert (SME) opinion on many projects for other teams and Senior management of the Bank.
- Play an active role in the day-to-day management of the communities comprising of cross functional stakeholders such as IT Group, incl. IT continuity & IT resilience teams, CISO teams, Third-party risk management teams, Operational resilience managers, vital service owners, etc.
- Perform quality assurance and independent testing on Operational Resilience along with the development and maintenance of procedures, artifacts, and metrics to be used.
- Actively advise Business and IT teams on the remediation actions for identified risks on Operational Resilience (incl. regulators recommendations and actions plans)
- Conduct Operational Resilience (incl. business Continuity, IT resilience and third-party technology) risk assessments of the Group and Entities, as well as of critical third parties including advising management on how to mitigate any identified risk.
- Support other 2LoD teams in identifying resilience gaps in processes, controls and in remediating these.
Profile And Skills To Success
Business Skills
- 8 years of experience or practical understanding in the fields of Cyber/ information security, ICT risk management, IT resilience, third party technology risk management
- Professional qualifications relevant to information security, business continuity or third-party technology risk management (CISSP, CISA, MBCI, CBCP, CISM or CRISC certifications considered an asset)
- Previous experience in Financial Sector, matrix organisations and 1LoD/2LoD/3LoD roles
- Strong risk mindset with understanding of applicable technology risk and resilience regulatory requirements such as DORA.
- Able to interface, coordinate and work efficiently and effectively with senior business and technology stakeholders
- Demonstrating a calm professional approach, with a good understanding of delivery within time constraints and the need to escalate/inform managers as appropriate
- Good team player, relationship building, influencing, and facilitating skills.
- Good understanding of Cyber, Information Security,
- Strong capability of synthesis and adaptation
- Strong MS Office and SharePoint skills (core applications)
BNP Paribas, The European Leader In Banking And Financial Services In Europe, Operates In 64 Countries And Has Nearly 180,000 Employees. The Group Is Structured Around Three Operating Divisions. Its Business Lines Cooperate Closely, As Part Of Our Integrated Model, To Meet The Needs Of All Our Clients In a Coordinated Manner
- Corporate & Institutional Banking (CIB), connects corporate clients needing financing and institutional clients looking for investment opportunities;
- Commercial, Personal Banking & Services (CPBS), brings together all the Group’s commercial & personal banking and several specialised businesses;
- Investment & Protection Services (IPS), combines a unique continuum of products and services across protection, saving, investment and real-estate.
In Portugal since 1985, BNP Paribas today has more than 9.700 employees, distributed across the Group's 10 business entities established in the country. Its presence also extends to 11 excellence centres providing value-added services to various countries where the BNP Paribas Group also operates.
Diversity and Inclusion Commitment
BNP Paribas´ Ambition Is To Cultivate An Open And Responsive Environment For All That Encourages Collaboration And Interaction. We Demonstrate Our Commitment By Actively Contributing To The Group’s Diversity And Inclusion Strategy And Goals, In Line With The United Nations Sustainable Development Goals. As Part Of Our Local Corporate And Social Responsibility - Diversity & Inclusion Strategy, BNP Paribas Portugal Is Committed To
- Promote a fair and unbiased recruitment process and offer professional development opportunities to all employees;
- Celebrate diversity and advocate for inclusion, both externally and internally, encouraging employee’s participation, creating space for different voices to be heard.
Remote Working Conditions
At BNP Paribas, we embrace a Smart Working framework based on trust, autonomy and collaboration. Within this framework, eligible employees can benefit from flexible remote working options adapted to our hybrid working environment. To ensure a comfortable and efficient working setup, eligible employees are provided with both office and home equipment, are entitled to an equipment allowance and can benefit from exclusive partnerships to purchase additional items at reduced prices.
Commitment towards work/life balance
Supporting employees in a hybrid way of working while providing them with the means to maintain a work-life balance is an essential dimension of our Smart Working program. At BNP Paribas, we care about our employees’ wellbeing and promote a culture of good integration between work and personal life.
To find out more on why you should join BNP Paribas please read our Employee Value Proposition and our Career path page.
- Please note that only applications submitted in English will be considered.
- In case you are selected for this role, further documentation will be requested to support your hiring process.