IT OPC Specialist: Cyber Security Risk & Compliance

BNP Paribas Fortis; Brussel Hoofdstad; On-site; EUR 65,000 - 90,000; Full time

Job summary

BNP Paribas Fortis is seeking an IT Operational Permanent Control (OPC) Specialist to strengthen the Governance, Risk, and Compliance framework. You will analyze IT risk data, implement and test controls, and prepare reports for ExCo and regulators, ensuring a robust control environment across IT operations.

Your role includes coordinating IT risk questionnaires, maintaining procedures, and supporting major IT initiatives as NAC secretary, aligning activities with the CIO and IT management.

Qualifications

• Experience in risk assessment and governance processes.
• Ability to translate risk data into actionable insights for leaders.
• Experience with IT risk controls, compliance, and outsourcing considerations.
• Familiarity with regulatory reporting requirements and internal controls.

Responsibilities

• Identify and assess IT risk across risk systems and governance bodies.
• Execute and adapt control tests (compliance, fraud, outsourcing) and report findings to CIO.
• Prepare regulatory and internal reports for ExCo, regulators, and Group entities.
• Governance of IT risk procedures; ensure accessibility and visibility of controls framework.
• Act as NAC secretary for major IT initiatives, tracking stakeholder conditions and alignment.
• Conduct annual RCSA for IT risk categories using RISK ORM methodology.
• Coordinate ECB IT Risk questionnaire responses and BNP Paribas Fortis reporting to regulators.

Skills

Risk analysis

IT governance

Control testing

Regulatory reporting

NAC coordination

Stakeholder management

Tools

RISK ORM

Job description

BNP Paribas Fortis is seeking an IT Operational Permanent Control (OPC) Specialist to strengthen the Governance, Risk, and Compliance framework. You will analyze IT risk data, implement and test controls, and prepare reports for ExCo and regulators, ensuring a robust control environment across IT operations.

Your role includes coordinating IT risk questionnaires, maintaining procedures, and supporting major IT initiatives as NAC secretary, aligning activities with the CIO and IT management.