IT Operational Permanent Controller (OPC)

South Europe Technologies (S.ET Iberia) is one of BNP Paribas Personal Finance's shared services centers, dedicated to delivering outstanding IT solutions to BNP Paribas Personal Finance entities around the world. What We Do

• Applications Management (Architecture, Project Management, Development, and Quality Assurance)
• IT Risks & Cybersecurity Services
• Platforms Management
• Data
• Ad-hoc, T&M Development

Mission

Integrate the Operational Permanent Control activities, under the direction of the IT OPC of PF, to pilot with other teammates the implementation and execution of all or part of the Operational Risk Management (ORM) device of BNP Paribas Personal Finance (PF). Your Main Activities Will Include

• To deploy all or part of the Risk procedures and best practices in Risk Management in the area of controls and associated mitigation plans.
• Analyzing results, identifying failures, and reporting results.
• Capitalizing on controls, guidelines, and associated indicators (RAS, KRI, KPI).
• To animate, analyze, and consolidate topics to improve risk control at PF by:
• Participating in communication/training sessions for management and Risk/Security/Continuity experts in subsidiaries.
• Preparing for and participating, as needed, in IT Risk steering committees.
• Reporting to the team, management, and PF subsidiaries on the situation and remediation actions by creating synthetic indicators and dashboards.

Operational Responsibilities

• INCIDENTS: manage incidents and ensure knowledge sharing on major historical incidents with local OPCs.

• Register incidents for its activities in the reference procedure RISK 0332.

• Note historical incidents in RISK360 and SNOW ITSM tools and ensure action plans are implemented.

• Perform regular incident analyses to update procedures and control plans as needed.

• RCSA (Risk Cartography and Risk Assessment): analyze risks related to its function/business and process mapping.

• Ensure proper completion of the RCSA for its Function in accordance with procedure RISK 0325.

• Define generic pairings (Risk Event/Process) and associate applicable controls.

• Coordinate with LoD2 teams and local OPCs for implementation.

Responsibilities as Point of Entry

• Ensure system relevance (updates, enhancements, deployment monitoring).
• Ensure system compliance with Group procedures and regulatory requirements.
• Act as main contact for activities in France (OPC IT PF France, ITRO France, Risk France Direction).

IT Tools

• MS Office suite (Excel, PowerPoint, SharePoint, etc.)
• Ticketing tools (Service Now, Jira)

• More than 5 years of proven experience in risk management and IT professions.
• Business and transversal skills in data manipulation with emphasis on data quality and reliability.

Personal Skills

• Critical analysis and questioning
• Good communication skills (written and oral), ability to lead meetings, and pedagogy to share knowledge
• Adaptability

Valuable Skills (Nice To Have)

• Knowledge of risk methodology

Language Skills

• English: C1 or higher (mandatory)
• French: Optional

• Training programs, tailored career paths, and opportunities for internal mobility at national and international levels.
• Diversity and Inclusion initiatives and employee communities (PRIDE, We Generations, MixCity, etc.).
• Corporate volunteering program (1 Million Hours 2 Help).
• Flexible compensation plan and hybrid work model (50%).
• 31 vacation days.