About the job

Purpose: Operational Resilience is an outcome of sound risk management practices. The purpose of the role is to ensure that CIB achieves operational resilience following the principles and approaches from the regulatory requirements across the globe and any risks to achieving operational resilience are managed appropriately and timely. The role exists to supervise and independently oversee the management of both types of risks (operational resilience risks and risks to achieving operational resilience)

Scope: Global CIB (including BP2S) and with a specific focus on Portugal platform and territory.

Management Reponsibilities

• Influence business stakeholders and other RISK ORM staff to ensure operational resilience.

  
  

• Supervise and guide colleagues and CIB staff in terms of operational resilience.

  
  

Your Main Activities Are

The candidate will be responsible for supporting the development and implementation of an oversight framework for Operational Resilience activities that will include business continuity, IT resilience, third party resilience and crisis management.

• Framework: to review, analyse and challenge the CIB Operational Resilience framework and in particular the norms and standards, consistently with RISK ORM guidelines, and validate any exemption to these norms and standards.

  
  

• Governance: to assist in preparation, organisation and secretariat the committees at CIB level regarding Operational Resilience, in liaison with CIB relevant teams.

  
  

• Risk Identification and Assessment: to challenge and verify CIB risk identification, ensure the consistency of ?severe but plausible? scenarios and their quantification, conduct independent risk assessment (incident review, post mortem analysis?), and validate closure of permanent control actions.

  
  

• Risk Treatment and Decision: to oversee of the risk treatment process (risk acceptance, risk transfer, risk remediation) performed by CIB, give opinion in co-decision Committees (eg: NAC/TAC or similar) leading to escalation in case of disagreement, challenge and sign off on CIB Operational Resilience profile, key decisions and remediation plans.

  
  

• Testing: to perform independent challenge and testing of CIB controls on operational resilience.

  
  

• Risk Reporting, Monitoring and Alert: to provide independent Operational Resilience reporting and consolidated view to CIB and RISK Senior management and supervisors; to support management on incidents and crisis management (e.g. security events); to alert Senior Management and stakeholders on critical points for attention.

  
  

• Awareness / Training / Animation: to promote and drive awareness on Operational Resilience across CIB; to assist in organising risk meetings, forums and committees with community members.

  
  

Profile and Skills to Success

Successful candidate will have exposure to developing and implementing risk management programs in global organizations, with robust knowledge of technology, risks, architectures and related tools. Prior business continuity or IT continuity or third party risk management experience (IT, Cyber, Vendor management etc.) and exposure to the Financial Services industry is a must. Experience with Governance, Risk and Compliance (GRC) tools and other risk management information systems is preferred.

This is a start-up role that will help create the function. An influencer and trust builder who can sell a value proposition is important. Negotiation and Conflict Management skills an absolute must. The individual will assist in the preparation /contribution to the development of independent testing controls and support the wider RISK ORM CIB community globally in defining better maturity models for independent testing. Excellent presentation skills are necessary. Experience interacting with regulatory agencies is a plus.

Specific requirements

• Suitable experience (5+ preferred) in business continuity, operations or IT continuity

  
  

• Bachelor degree in Information Technology, Information Security, Business or Risk Management (or equivalent professional qualification).

  
  

• Team player ? focus on the success of the whole team. Working well both with others, as well as individually.

  
  

• Excellent stakeholder management skills.

  
  

• Experience in a 2LoD, Risk function, operations or an IT Audit role.

  
  

• Good listening and analytical skills ? being able to come to a thoughtful and business focused conclusion quickly.

  
  

• Ability to co-operate and work well with others adopting an approachable style ? Important as we work closely with a large and diverse set of customers;

  
  

• Ability to see the customer perspective, i.e. from a business point of view, the most secure solution is not always workable or realistic considering costs and benefits.

  
  

• Demonstrating a calm professional approach, with a good understanding of delivery within time constraints and the need to escalate/inform departmental management as appropriate.

  
  

• Adapting personal approach to suit situations, individuals, groups and cultures. Is flexible in relation to getting the job done.

  
  

• Taking accountability for their actions and be open and honest when things have gone wrong, and celebrating successes when things have gone well.

  
  

• Being rigorous and thorough ? especially when logging and tracking issues through to conclusion.

  
  

• Ability to manage their workload as to meet the realistic targets and priorities set in conjunction with management.

  
  

• Demonstrating a high-level of commitment and self-motivation, combined with enthusiasm and a genuine interest in the role of Risk Assessment in business.

  
  

• Ability to express views clearly and fluently, both orally and in writing. Considers the audience, avoiding technical jargon wherever necessary and appropriate.

  
  

• Good knowledge of Business Continuity, IT Continuity and Audit methodology and concepts.

  
  

• Understanding of the banking industry's regulatory requirements on Operational Resilience (e.g., BoE supervisory statement, European DORA, BCBS papers on resilience and risk)

  
  

• Experience working with IT, business continuity, IT risk and audit teams

  
  

• Ability to articulate risk management concepts in business language

  
  

• Excellent written and verbal communication skills

  
  

• Proficient with Microsoft Office Suite

  
  

• Prior experience documenting tool requirements to support risk management

  
  

• Ability to travel to vendor sites and perform assessments as necessary

  
  

• Proven ability to manage issues through to resolution; skilled at making judgment calls.

  
  

• Ability to successfully multitask and complete difficult assignments within deadlines which may have short lead times

  
  

• Industry certifications (e.g. CISA) or willingness to obtain the same

  
  

• Works iteratively, delivering quickly and frequently to produce high quality documents and outputs which require little to no rework.

  
  

• Multilingual capability (English and French) is preferred

  
  

Conduct

• Be a role model, supporting and fostering a culture of good conduct.

  
  

• Demonstrate proactivity, transparency and accountability for identifying and managing conduct risks.

  
  

• Consider the implications of your actions on colleagues, partners and clients before making decisions, and escalate issues to your manager when unsure

  
  

About the Team

RISK Operational Risk Management (RISK ORM) CIB belongs to the second line of defence of BNP Paribas Corporate and Institutional Bank (CIB). It belongs to the Risk Function (RISK) of BNP Paribas (RISK) and is placed under the responsibility of the Chief Operational Risk Officer (CORO) for CIB.

The department has responsibility for independently challenging and supervising the Operational Risk management of CIB activities (Global Banking, Global Markets, Securities Services, IT, Operations, Functions) on a worldwide scope. This is achieved through: framing operational risk methodology for CIB and disseminating of risk management culture across CIB; assessing the adequacy of the CIB operational risk management set-up; controlling effectiveness of CIB control environment; contributing to the detection, anticipation and response to risks; alerting CIB and RISK stakeholders on any significant risk issue; providing a consolidated view on CIB operational risks profile.

As the second line of defence for Operational Resilience, RISK ORM has the responsibility for oversight and supervision on risks of achieving operational resilience for CIB, ensuring and opining that appropriate operational resilience efforts are underway and raise any alerts in case of issues to the stability of the Bank and influencing business, functions and technology partners to take sound risk management decisions.

Why joining BNP Paribas?

• Leading banking institution

  
  

BNP Paribas is a leader in the Eurozone, and a prominent international banking institution with strong roots in Europe's banking history. It has a presence in 72 countries, with around 200 000 Employees ? including more than 150 000 in Europe.

• Our presence in Portugal

  
  

Since 1985, BNP Paribas was one of the first foreign banks to operate in the country. Today, the Group has around 6.500 employees across several entities operating directly in the territory, offering a wide range of integrated financial solutions to support its clients and their businesses.

• International reach

  
  

Thanks to its international presence and regular and close collaboration among its different entities, BNP Paribas has the resources to support all clients with financing, investment, savings and protection solutions that help make their projects a success. BNP Paribas holds key positions in its three core operating divisions: Domestic Markets and International Financial Services for retail banking and specialised financial services, and Corporate & Institutional Banking for corporate and institutional clients.

In its Corporate & Institutional Banking and International Financial Services activities, BNP Paribas also enjoys top positions in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific.

• Diversity and Inclusion commitment

  
  

BNP Paribas is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency, which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients.

To find out more on why you should join BNP Paribas visit https://bnpp.lk/why-BNP-Paribas-Portugal

• Please note that only applications submitted in English will be considered.
  

• In case you are selected for this role, further documentation will be requested to support your hiring process.