Assistant Manager - Cybersecurity Framework Expert

Job Title: Cybersecurity Framework Expert

Department: IT Group – Cyber‑Digital Fraud (CDF)

Location: Chennai, India

Position Overview

The Cybersecurity Framework Expert will help build BNP Paribas India platform and ensure the delivery of core cybersecurity, IT‑risk and operational‑resilience activities with the required efficiency and quality. The role sits in the IT Group's Cybersecurity & Digital‑Fraud team and works closely with global experts, the second line of defense and business units across the Group.

Core Responsibilities

Direct Responsibilities

• Define and review cybersecurity requirements across 28 topics (AI, application, data, network, cloud/container, IAM, asset management, SWIFT, etc.) for all Group entities.
• Draft or update procedures that complement those requirements.
• Create evidence‑sample libraries to support cybersecurity‑maturity assessments.
• Ensure project delivery on schedule and to high technical‑ and linguistic‑quality standards.
• Host and facilitate global workshops to discuss new requirements and procedures with Group experts and the second line of defense.
• Report project status, risks and escalations to the line manager on a regular basis.
• Design and maintain reusable patterns that map cybersecurity requirements to entity‑level risk exposure (Cyber Maturity Assessment – CMA).
• Incorporate emerging programmes (Zero‑Trust, DLP, PQC) into the patterns and promote them across entities.
• Contribute to the evolution of the Group security programme within the GRC‑IT tool (requirements, evidence, assessments).
• Perform gap analyses against regulations such as EU GDPR and DORA and propose remediation requirements.
• Maintain professional development – obtain at least one recognized certification every 2 years (e.g., AAISM, CRISC, CCSP, CCSK, CCNA).

Professional Experience

• ≥ 10 years total experience, with ≥ 6 years dedicated to cybersecurity

• Proven track record in cross‑cultural, international projects and dispersed teams

Certifications

CISSP (mandatory)

Technical Knowledge

• Deep understanding of cybersecurity and continuity frameworks & standards (NIST, DORA, PCI‑DSS, ISO 27001, ISO 22301)

• Strong grasp of current cyber‑threat trends and controls (Zero‑Trust, DLP, PQC)

Contributing Responsibilities

• Support senior team members in the preparation of documentation, training material and internal communications.
• Participate in cross‑functional working groups and ad‑hoc task forces as required.

Tools

MS Word, MS Excel (advanced level)

Communication

Excellent writing, editing, presentation and constructive‑challenge skills; ability to translate technical concepts for non‑technical audiences

Behavioral

Positive, motivated attitude; rigor, attention to detail; strong prioritization, multitasking and adaptability; active listening; knowledge‑sharing mindset

Preferred Education, Skills & Experience

• Additional certifications such as AAISM, CRISC, CCSP, CCSK, CCNA, or other recognized security credentials.
• Experience with GRC‑IT platforms and maturity‑assessment tools.
• Hands‑on familiarity with cloud security frameworks (e.g., CSPM, container hardening) and AI‑related security controls.
• Experience in financial‑sector regulatory environments beyond GDPR/DORA (e.g., EBA, Basel III).

Technical & Behavioral Competencies

• Strategic foresight – Anticipate business and security evolution; set relevant KPIs.
• Change champion – Explain, support and drive change initiatives.
• Synthesis – Distil complex information into clear, actionable guidance.
• Knowledge transfer – Mentor peers and disseminate best practices.
• Collaborative mindset – Work effectively with global stakeholders and diverse teams.

Commitment to Diversity & Inclusion

BNP Paribas embraces diversity and fosters an inclusive workplace where every employee is respected and can bring their authentic self to work. Discrimination or harassment of any kind is prohibited. Equal employment opportunity is provided irrespective of gender, gender identity, sexual orientation, ethnicity, race, colour, national origin, age, religion, disability, veteran status or any other protected characteristic.

If you are passionate about elevating cybersecurity maturity across a global banking group and thrive in a collaborative, high‑impact environment, we invite you to apply for the Cybersecurity Framework Expert position.