IT Risk

About BNP Paribas Group:
BNP Paribas is a top-ranking bank in Europe with an international profile. It operates in 71 countries and has almost 199 000 employees. The Group ranks highly in its three core areas of activity: Domestic Markets and International Financial Services (whose retail banking networks and financial services are grouped together under Retail Banking & Services) and Corporate & Institutional Banking, centred on corporate and institutional clients. The Group helps all of its clients (retail, associations, businesses, SMEs, large corporates and institutional) to implement their projects by providing them with services in financing, investment, savings and protection. In its Corporate & Institutional Banking and International Financial Services activities, BNP Paribas enjoys leading positions in Europe, a strong presence in the Americas and has a solid and fast-growing network in the Asia/Pacific region.

About BNP Paribas India Solutions:
Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, a leading bank in Europe with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 6000 employees, to provide support and develop best-in-class solutions.

About Businessline/Function:
Job Title:
IT Risk & Control Analyst

Date:
Department:
**IT Risk & Cybersecurity - Risk**

**Location**:
Chennai

Business Line / Function:
Wealth Management

Reports to:
(Direct)

Grade:
(if applicable)

(Functional)

Number of Direct Reports:
Directorship / Registration:
NA

**POSITION PURPOSE**:
Provide a brief description of the overall purpose of the position, why this position exists and how it will contribute in achieving the team’s goal.

**Replacement position for IT Risk and Control to work on IT control, Risk management, Shadow IT, Operational risk incident**

**Responsibilities**

**DIRECT RESPONSIBILITIES**:
The IT Risk and Control Analyst is responsible for contributing to the adoption of WM GAIM IT Risk framework such as
- IT Risk Management

Identify and assess the risks as a result of WMIS activities for which we are accountable.

Record, monitor, review and provide reporting of the risk identified

Initiate and/or monitor the progress of all risk mitigation actions

Assess IT Risk throughout the project life cycle and to ensure proper follow up of identified risk until the project deployment.
- IT Control

Perform IT control testing according to the group’s framework

Monitor corrective actions that would result from the findings of the permanent control framework,
- Shadow IT

Responsible for the Shadow IT inventory collection and assessment for the APAC region
- Operational Incident Risk management

Assess operational risk associated with production and project incident to ensure correct handling.

Management reporting of such incidents to ensure proper escalation

Record operational risk incident in risk tool

Measure the risk through the tracking of historical operational incidents
- Others

Timely and accurate IT Key Risk indicator reporting to the management

Global and APAC Management reporting of WMIS risk situation. Measure the risk through the tracking of historical operational incidents

**TECHNICAL & BEHAVIORAL COMPETENCIES**:

- Strong knowledge of IT Risk Management with practical exposure
- Familiar with IT System Development Life Cycle process and methodology
- Knowledge of Information Systems in Banking industry
- Strong English communication skills in both written and verbal
- Team player with strong coordination skills
- Strong interpersonal and analytical skills
- Strong knowledge of Microsoft Office suite
- Knowledge of Service NOW GRC tool is an advantage.
- RISC certification preferred

**Other Value-added Competencies**:
High regard for confidentiality and integrity of all confidential information

Familiar with regulatory requirements, concepts, trends and technologies

Familiar with data governance and protection

Ability to provide accurate reporting to the Management

Adaptability to handle specific management requests

**SPECIFIC QUALIFICATIONS (IF REQUIRED)**:

- Bachelor’s Degree in Information Technology or equivalent qualification, with 10 to 15 years of relevant experience in areas including but not limited to IT Risk Management, IT Audit and/or IT Security
- Risk Management certification (e.g., ISO 31000, ISACA CRISC, etc)
- Project Management skills

**Skills Referential**

Behavioural Skills: (Please select up to 4 skills)

Ability to collaborate / Teamwork

Attention to detail / rigor

Resilience

Communication skills - oral & written

Transversal Skills: (Please select up to 5 skills)

Analytical Ability

Ability to manage / f