IT & Cyber Permanent Control Officer (H/F/X)
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
YOUR JOB IN A NUTSHELL
Join BNP Paribas Fortis as an IT Operational Permanent Control (OPC) Specialist At BNP Paribas Fortis, our Cyber Security division unites the Centre of Excellence (CoE) Security and IT Filiere Production Security BE to design, implement, and maintain robust security solutions.
Our mission? To foster a trustworthy, secure environment for both our colleagues and clients.
We’re seeking a proactive professional to join our IT Operational Permanent Control (OPC) team, a key function within Governance, Risk, and Compliance (GRC). Here, you’ll play a pivotal role in helping IT and Business Units navigate operational risks tied to IT and Cyber Security, while reinforcing an adaptive, resilient control framework across the bank.
AND IN DETAIL
- Identification and assessment of risks : You’ll analyse data from risk systems, reports, and governance bodies, turning complex information into practical, risk-based insights. Your conclusions will help leaders make informed decisions.
- Controls Execution & Reporting : You’ll interpret, adapt, and run control tests (compliance, fraud, outsourcing, etc.), then report findings to the CIO, ensuring controls align with IT’s strategic priorities.
- Regulatory & Internal Reporting : You’ll prepare precise, high-impact reports for the Internal Control Committee (ExCo), regulators (NBB/BNB, ECB), and Group entities (CDF/IT Group), shaping risk discussions at the highest level.
- Procedure Governance : As the gatekeeper for IT risk and security procedures, you’ll ensure they’re up to date, accessible, and visible, keeping our compliance framework structured and resilient.
- Governance Body Support : Acting as NAC secretary for major IT initiatives, you’ll track stakeholder conditions (Business & Functions), driving accountability and alignment in high-impact projects.
- Risk & Control Self-Assessment (RCSA): You’ll conduct the annual RCSA for all IT risk categories, using the RISK ORM methodology to assess risks, incidents, and recommendations, giving a full picture of IT’s risk profile, including external threats.
- Regulatory Reporting – IT Risk Questionnaire : You’ll coordinate the bank’s response to the ECB’s IT Risk questionnaire (via Group) and the NBB’s BNP Paribas Fortis reporting, ensuring submissions are accurate, regulator-ready, and endorsed by the CISO/CIO.
- Compliance Controls Execution : You’ll run IT-wide compliance checks (awareness, ethics, etc.), report findings to the IT Management Team, and drive remediation where needed, ensuring actions are documented and evidenced.