IT & Cyber Permanent Control Officer (H/F/X)

BNP Paribas Fortis; Brussel Hoofdstad; On-site; EUR 65,000 - 90,000; Full time

Job summary

BNP Paribas Fortis is seeking an IT Operational Permanent Control (OPC) Specialist to strengthen the Governance, Risk, and Compliance framework. You will analyze IT risk data, implement and test controls, and prepare reports for ExCo and regulators, ensuring a robust control environment across IT operations.

Your role includes coordinating IT risk questionnaires, maintaining procedures, and supporting major IT initiatives as NAC secretary, aligning activities with the CIO and IT management.

Qualifications

• Experience in risk assessment and governance processes.
• Ability to translate risk data into actionable insights for leaders.
• Experience with IT risk controls, compliance, and outsourcing considerations.
• Familiarity with regulatory reporting requirements and internal controls.

Responsibilities

• Identify and assess IT risk across risk systems and governance bodies.
• Execute and adapt control tests (compliance, fraud, outsourcing) and report findings to CIO.
• Prepare regulatory and internal reports for ExCo, regulators, and Group entities.
• Governance of IT risk procedures; ensure accessibility and visibility of controls framework.
• Act as NAC secretary for major IT initiatives, tracking stakeholder conditions and alignment.
• Conduct annual RCSA for IT risk categories using RISK ORM methodology.
• Coordinate ECB IT Risk questionnaire responses and BNP Paribas Fortis reporting to regulators.

Skills

Risk analysis

IT governance

Control testing

Regulatory reporting

NAC coordination

Stakeholder management

Tools

RISK ORM

Job description

YOUR JOB IN A NUTSHELL

Join BNP Paribas Fortis as an IT Operational Permanent Control (OPC) Specialist At BNP Paribas Fortis, our Cyber Security division unites the Centre of Excellence (CoE) Security and IT Filiere Production Security BE to design, implement, and maintain robust security solutions.

Our mission? To foster a trustworthy, secure environment for both our colleagues and clients.

We’re seeking a proactive professional to join our IT Operational Permanent Control (OPC) team, a key function within Governance, Risk, and Compliance (GRC). Here, you’ll play a pivotal role in helping IT and Business Units navigate operational risks tied to IT and Cyber Security, while reinforcing an adaptive, resilient control framework across the bank.

AND IN DETAIL

• Identification and assessment of risks: You’ll analyse data from risk systems, reports, and governance bodies, turning complex information into practical, risk-based insights. Your conclusions will help leaders make informed decisions.
• Controls Execution & Reporting: You’ll interpret, adapt, and run control tests (compliance, fraud, outsourcing, etc.), then report findings to the CIO, ensuring controls align with IT’s strategic priorities.
• Regulatory & Internal Reporting: You’ll prepare precise, high-impact reports for the Internal Control Committee (ExCo), regulators (NBB/BNB, ECB), and Group entities (CDF/IT Group), shaping risk discussions at the highest level.
• Procedure Governance: As the gatekeeper for IT risk and security procedures, you’ll ensure they’re up to date, accessible, and visible, keeping our compliance framework structured and resilient.
• Governance Body Support: Acting as NAC secretary for major IT initiatives, you’ll track stakeholder conditions (Business & Functions), driving accountability and alignment in high-impact projects.
• Risk & Control Self-Assessment (RCSA): You’ll conduct the annual RCSA for all IT risk categories, using the RISK ORM methodology to assess risks, incidents, and recommendations, giving a full picture of IT’s risk profile, including external threats.
• Regulatory Reporting – IT Risk Questionnaire: You’ll coordinate the bank’s response to the ECB’s IT Risk questionnaire (via Group) and the NBB’s BNP Paribas Fortis reporting, ensuring submissions are accurate, regulator-ready, and endorsed by the CISO/CIO.
• Compliance Controls Execution: You’ll run IT-wide compliance checks (awareness, ethics, etc.), report findings to the IT Management Team, and drive remediation where needed, ensuring actions are documented and evidenced.