IT Risk Process Expert

About BNP Paribas India Solutions

Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union’s leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.

About BNP Paribas Group

BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialised businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Groups performance and stability

Commitment to Diversity and Inclusion

At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.

About Business Line/Function

BNP Paribas Leasing Solutions (BPLS) is a brand of the BNP Paribas Group specializing in leasing financing solutions for equipment for professionals and businesses. At BPLS, we offer capital efficient business equipment financing solutions in key sectors including agriculture, construction, transportation, materials handling, ICT, healthcare, and green tech. Our routes to market include direct, via manufacturers and resellers, as well as the commercial and personal banking network of BNP Paribas.

Drawing on our proud 70-year history, our partners and clients rely on our market expertise, asset know-how and advisory services to propel their growth, transformation & transition to a low carbon circular economy.

We are present in 17 countries across Europe and Türkiye, employing over 3,700 experts. We also offer vendor finance solutions in the USA and Canada in partnership with Bank of Montreal, and in China through Jiangsu Financial Leasing.

In 2022, we advanced over 14€ billion in asset finance and presently manage a 38€ billion leased assets portfolio.

BNP Paribas Leasing Solutions is fully owned by BNP Paribas and is positioned within the Group’s Commercial, Personal Banking & Services (CPBS) division.

Job Title

IT Risk – Process Expert

Date

Department:

ITG Intl – CPBS – BNP

Location:

Chennai

Business Line / Function

IT Risks, I.T. RISK MANAGEMENT

Reports To

(Direct)

BPLS ISPL manager

Grade

(if applicable)

(Functional)

BPLS manager

Number Of Direct Reports

NA

Directorship / Registration

NA

Position Purpose

IT Risks, ITRM is the 1loD (1st line of defence) in terms of IT Risk cards management, Historical incidents and Shadow IT monitoring & management.

The IT Risks team oversees the management of Cyber and IT Risks on all BNP Paribas LS entities. In this context, IT Risk analyst is responsible for identifying, analysing and monitoring IT risks for Leasing solutions worldwide perimeter. The role supports business and IT teams/ stakeholders in understanding technology risks, defining remediation plans and maintaining an accurate and up-to-date IT Risk register.

The IT risks are formalized via IT Risk cards on the ServiceNow (SNOW) platform. The IT risks once identified should be validated with the relevant stakeholders within a month after the assessment. The position plays a key role in strengthening the IT risk management and ensuring the IT risk profile of the entity.

During the Shadow IT Campaign, IT risks team conducts the interview with the relevant stakeholders to identify and review the Shadow IT situations for each business line.

2LOD is the 2nd line of defence under RISK’ responsibility and could challenge LOD1 on IT risks & Shadow IT situations.

Responsibilities

Direct Responsibilities

• Identify and assess IT Risks across applications, infrastructure, projects, cloud, data and third-party services. Evaluate IT risks related to system changes, new initiatives and transformation programs.
• Launch and monitor Shadow IT annual campaign and awareness sessions.
• Conduct Shadow IT interviews during the annual Shadow IT campaign and formalise the Shadow IT situations in SNOW.
• Perform complex and high impact risk assessments related to strategic initiatives, system transformation in line with the IT risk framework.
• Own and govern the IT risk register ensuring accuracy, completeness and consistency.
• Organise IT Risk review with the relevant stakeholders:
• Monitor risk status and escalation triggers
• Support business and IT teams in defining pragmatic and effective risk remediation plans.
• Challenge risk assessments and remediation plans to address adequately root causes.
• Prepare IT Risk reports, KPIs for senior management and Risk committees.
  
  

Contributing Responsibilities

• Provide guidance on IT risk methodology and GRC SNOW (ServiceNow) functionalities.
• Contribute to the enhancement of IT risk frameworks, methodologies and SNOW tool.
• Monitoring emerging IT and cyber risks and assess their impact to Leasing solutions and banking sector.
  
  

Technical & Behavioral Competencies

Technical Competencies

• At least 5+ years of experience in IT Risks, cyber security, technological and operational risk, cloud within Banking environment.
• Proven experience in strong analytical and risk assessment skills using the risk assessment frameworks:
• ISO 27001/ ISO 27005
• NIST
• IT risk management tools and GRC SNOW platform
• Ability to translate complex technical risks into clear business impact.
  
  

Behavioral Competencies

• Risk-driven mindset
• Strong sense of accountability
• Structured, rigorous and proactive approach
• Ability to challenge business stakeholders constructively
  
  

Specific Qualifications (if Required)

• Understanding and ability to function in an Agile framework
  
  

Skills Referential

Behavioural Skills: (Please select up to 4 skills)

Decision Making

Ability to collaborate / Teamwork

Ability to deliver / Results driven

Personal Impact / Ability to influence

Transversal Skills: (Please select up to 5 skills)

Ability to set up relevant performance indicators

Ability to inspire others & generate peoples commitment

Ability to anticipate business / strategic evolution

Ability to manage / facilitate a meeting, seminar, committee, training…

Ability to understand, explain and support change

Education Level

Master Degree or equivalent

Experience Level

At least 8+ years

---