IT Risk - Control Plan

About BNP Paribas India Solutions

Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union's leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.

About BNP Paribas Group

BNP Paribas is the European Union's leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group's commercial & personal banking and several specialised businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability

Commitment to Diversity and Inclusion

At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.

About Business Line/Function

BNP Paribas Leasing Solutions (BPLS) is a brand of the BNP Paribas Group specializing in leasing financing solutions for equipment for professionals and businesses. At BPLS, we offer capital efficient business equipment financing solutions in key sectors including agriculture, construction, transportation, materials handling, ICT, healthcare, and green tech. Our routes to market include direct, via manufacturers and resellers, as well as the commercial and personal banking network of BNP Paribas.

Drawing on our proud 70-year history, our partners and clients rely on our market expertise, asset know-how and advisory services to propel their growth, transformation & transition to a low carbon circular economy.

We are present in 17 countries across Europe and Türkiye, employing over 3,700 experts. We also offer vendor finance solutions in the USA and Canada in partnership with Bank of Montreal, and in China through Jiangsu Financial Leasing.

In 2022, we advanced over 14€ billion in asset finance and presently manage a 38€ billion leased assets portfolio.

BNP Paribas Leasing Solutions is fully owned by BNP Paribas and is positioned within the Group's Commercial, Personal Banking & Services (CPBS) division.

Job Title

IT Risk – Control Plan

Date

Department:

ITG Intl – CPBS – BNP Paribas Leasing Solutions

Location:

Chennai

Business Line / Function

IT – ITRM

(IT Risk Management)

Reports To

(Direct)

ISPL Manager

Grade

(if applicable)

(Functional)

BPLS Manager

Number Of Direct Reports

NA

Directorship / Registration

NA

Position Purpose

ITRM is the 1loD is the 1st line of defence in terms of control and has the responsibility of continuous permanent control. Control framework aims to identify IT and Cyber risks and vulnerabilities and improve IT and Cyber robustness and maturity of the entity. In that context, one of the main control activities is to coordinate and execute all the I(nformation) C(ommunication) T(echnology) controls defined at Group level in a Group Control Library. This activity ICT control plan is under the responsibility of Control and Continuous Monitoring team (CCM). 5 controls categories are in the scope: IT Change controls, IT Outsourcing controls, Availability and Continuity controls, IT Security controls and Data integrity controls.

2loD is the 2nd line of defence under RISK responsibility and run controls to check, challenge and verify 1loD has correctly execute its controls and identify IT and Cyber risks. One of the controls is an annual verification and reperformance of the ICT controls executed Y-1.

Responsibilities

Direct Responsibilities

With CCM, schedule the annual ICT control plans (date and time for each control = campaign)

Prepare each campaign (execution)

• consider the feedback of the annual verification and reperformance of the ICT controls executed Y-1 in order to avoid same errors,
• understand the expected evidences for each controls points and results (1, 2, 3 or 4),
• take into consideration sampling rules for some control points,
• identify the executor and validator,
• set parameters in SNOW to run the control execution,
• communicate to the stakeholders all relevant information for the campaign.
  
  

Launch each campaign (execution)

• request/collect evidences,
• check/control evidences consistency,
• rate the controls accordingly,
• check existence of action plans for all 3 or 4 results,
• exchange with executor if necessary to clarify.
  
  

Prepare each campaign restitution (execution)

• prepare consolidation controls results,
• with CCM, coordinate action plan merging in generic action plan,
• analyse controls results,
• communicate results to the stakeholders.
  
  

Draw a lessons-to-learned of the overall annual ICT controls execution

Continuous action: Report all incidents in the process during the execution (coordination)

Contributing Responsibilities

Control campaign coordination

Schedule the annual ICT control plans (date and time for each control = campaign): 5 controls, some of them are executed on quarterly, biannually or yearly frequency.

Control campaign follow up and reporting in terms of campaign process and also control results.

Technical & Behavioral Competencies

IT Audit experience, ServiceNow

Skills Referential

Specific Qualifications (if required)

Behavioural Skills: (Please select up to 4 skills)

Ability to deliver / Results driven

Critical thinking

Attention to detail / rigor

Organizational skills

Transversal Skills: (Please select up to 5 skills)

Ability to develop and adapt a process

Ability to set up relevant performance indicators

Choose an item.

Choose an item.

Choose an item.

Education Level

Master Degree or equivalent

Experience Level

At least 5 years