Assistant Manager - IT Business Information Security Office (BISO) Engineer

Job Title: IT Business Information Security Office (BISO) Engineer

Department: ITGP - CPBS

About Business line/Function: BNPP Fortis support APS

Position Purpose

The BNP Paribas Fortis IT department is working in Agile mode, which offers a challenging and motivating environment where teams and employees are empowered to manage their own technical domain

The IT Production Security Department's Mission Is To

• Transform security into a strategic value-driver (i.e. enable innovation and enhance customers trust in our services)
• Have security integrated in the early design phase of products and services (secure by design)
• Root security deeply in our corporate DNA
• Validate the security of our services and solutions
  
  

As part of the Agile Impulse organization, the Security Tribe provides best-in-class security capabilities ready to be used by the other tribes.

Responsibilities

As BISO Engineer, you join the enthusiastic and multidisciplinary team Business Information Security Office. They're responsible for managing the implementation of the IT information security & Risk (IS&R) processes and standards.

To Achieve It, You Directly Contribute To Their Objectives

• Supporting the implementation of the information security & Risk (IS&R)
• Supporting the Information Security and Risk Management practices
• Coordination of the Information Security & Risk awareness initiatives within IT
• Collaboration with the IT squads to ensure alignment with security principles
• Build and maintain a good relationship with all IT interested parties in order to Monitor, control and report on the accesses of the IT squads
• Report to the IT BISO
• Interacts with the IT squads to raise the level of information security & risk to the required level and to monitor security risk related issues that concerned different squads and propose corrective actions
• Coordination point to ensure completeness of the application referential for information assets owned by IT
• Document procedures and processes
• Monitor and report on the status and progress of executed recurrent tasks:
• Vulnerability management
• Control plan execution
• Patch management dashboard
• Security configurations
• Internal quality control execution
• Exception management (logical accesses)
  
  

Technical & Behavioral Competencies

• You're the physical embodiment of the scrum values: involvement, focus, openness, and respect, with a good dose of courage to boot
• You're inquisitive and driven—and you're always on the ball
• You thrive in a team environment, happily sharing your knowledge and insights
• You are quick to make connections and dare to question everything that deserves it
• You're able to work under pressure
• You always search to improve yourself by learning new technologies, methodologies and/or how to be a better you
• You are excited by having responsibilities, making decisions & vulgarizing them
• You have a strong interest in Security & Development
• You know your way around:
• Technology landscape: infrastructure, systems and processes such as Hardware, OS, network, etc.
• Stakeholder management
• Communication best practices
• Process, procedures and how important they are
• Business intelligence
  
  

Mandatory

You have 4+ years of proven experience in Information Security, in at least 4 of the following subjects:

• Data aggregation, transformation, and reporting from diverse data sources
• Lead stakeholder communication on security vulnerabilities: present findings, coordinate remediation efforts, and ensure timely resolution through structured follow-up
• Vulnerability Management: vulnerability scanning and patching in a banking environment
• IAM: Identity and Access Management frameworks or tools
• CyberArk PAM: privilege access management in a hybrid environment
• Audit Preparation and Recertification: for certification audits like ISO 27001
• Regulatory compliance: ensure compliance with financial regulations like DORA or GDPR
  

Transversal Skills

• Ability to develop and adapt to a process
• Ability to understand, explain and support change
• Ability to anticipate business and strategic evolution
• Client focused
• Analytical ability
• Ability to manage a project
  
  

Behavioral Skills

• Communication skills
• Ability to collaborate/Teamwork, but also work autonomously
• Organizational Skills
• Client oriented
  
  

Education Level: Bachelor's degree in IT/Computer Science or equivalent practical experience

About BNP Paribas Group

BNP Paribas is the European Union's leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group's commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability.

About BNP Paribas India Solutions

Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union's leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.

Commitment to Diversity and Inclusion

At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.