IT Risk Analyst

BNP Paribas Personal Finance Group; Madrid; Hybrid; EUR 36,000 - 60,000; Full time

Benefits offered by this job

Training programs

Career mobility

Diversity & Inclusion

Volunteer program

Flexible compensation

Hybrid model (50%)

31 vacation days

Job summary

BNP Paribas Personal Finance Group in Madrid seeks an IT Risk Analyst to join the SET Iberia team. The role focuses on identifying IT and cyber risks, monitoring ICT risk, and supporting mitigation initiatives across our shared services for BNP Paribas entities worldwide.

The ideal candidate will have 2+ years in IT risk and cybersecurity, knowledge of third-party risk management, and strong teamwork. The position offers a hybrid work model (50%) in Spain with career growth opportunities.

Qualifications

• Minimum 2 years of proven IT risk management and cybersecurity experience.
• Knowledge of IT risk management for the third-party providers.
• Knowledge of application security.
• Open and team-oriented profile with autonomy.
• Advanced student/graduate of a computer science related career is a plus.
• Autonomy and time management.

Responsibilities

• Identify IT and Cyber risks inherent to the activity and monitor ICT risks.
• Assess risks by calculating probability and impact, and define mitigation measures.
• Support initiatives to ensure IT risks are addressed.
• Contribute to IT & Cyber risk assessments and control exercises.
• Ensure consolidated reporting of IT & Cyber risks and indicators.
• Ensure governance of third-party ICT risks and remediation follow-up.
• Participate in committees with providers and internal governance bodies.

Skills

IT Risk management

Cybersecurity

Third-party risk

Application security

English (B2)

Agile methodologies

Team collaboration

Education

Computer Science degree

Tools

ServiceNow

GRC tools

ISO 27001

NIST

DORA

Job description

Who are we?

We are South Europe Technologies (SET Iberia); the IT, Data and Operations Shared Service Center of BNP Paribas Personal Finance, with delivery centers in Spain and Portugal, providing the best solutions to BNPP PF entities around the world such as Cetelem (specialized, between others, in financial partnership of major retailers, consumer goods companies and car dealerships).

Among Other Services, Our Portfolio Is Composed Of:

• Applications Management (Architecture, Project Management, Development, and Quality Assurance).


• IT Risks & Cybersecurity Services.


• Platforms Management.


• Data Analytics and AI.


• Operations.

Our offices are in Spain (Madrid) and Portugal (Lisbon, Porto). The company brings together over 200+ employees, with expertise in various technologies (Java, .Net, Python, Tibco, APIGee) and other operational roles (Functional Analyst, Project Manager, Business Analyst, Auto Stock Financing operators). We keep growing!

Our consistent track record of services delivery means comfort for our customers and opportunities for our employees.

You will find SE.T Iberia to be full of energy and an Inclusive Workplace in which you truly can make a difference.

Would you like to join our international team that delivers end-to-end solutions (applications and operations activities) to businesses of BNP Paribas Personal Finance Group entities around the world?

In a context, we are looking for an IT Risk Analyst to join ur team.

Mission

• Identify the potential IT & Cyber risks inherent to the activity.
  
  
  
  • Identify and monitor the ICT risks in the organization and in the services delivered by the SSCs
  
  
  • Assess risks by calculating probability of occurrence and the IT and business impacts and identify and take into account the mitigation measures (control plans, monitoring programme of the IT & Cyber risk management system, etc.)
  
  
  • Support initiatives to ensure IT risks are taken into account and addressed.
  
  
  
  


• Contribute to the various IT & Cyber risk assessments and control exercises and reviews.


• Ensure reporting of IT & Cyber risk management providing a consolidated view of IT & Cyber risks and producing reports and indicators on IT risks.


• Ensure the correct application of the Third Party and Technology Risk management procedures:
  
  
  
  • Qualify any new or renewal of an externalized service
  
  
  • Ensure the proper governance of the third party ICT Risks.
  
  
  • Inclusion and negotiation of the security contractual clauses
  
  
  • Follow-up of the remediation activities.
  
  
  • Take part of the different committee with the provider and lead internal committee
  
  
  
  

IT Tools

• Good knowledge of IT Risk and cybersecurity frameworks (ISO27k, NIST, DORA).


• Knowledge of IT Risk analysis


• GRC tools (ServiceNow)

What We Are Looking For

• Minimum 2 years of proven working experience in IT Risk management and cybersecurity activities.


• Knowledge of the management of IT Risk of the third-party providers.


• Knowledge of Application security.


• Open and team-oriented profile rather than highly technical.


• Advanced student/graduate of a computer science related career (nice to have).


• Autonomy and time management.

Language Skills

• English: B2 or higher (oral and written) - mandatory.


• French: Nice to have level B1 or higher, but a plus.

Skills

BUSINESS

• Knowledge of banking and banking processes will be a plus.

Transversal Skills

• Experience in Agile methodologies (Scrum, Kanban).

Behavioral Skills

• Ability to understand, explain, and support solution evolutions.


• Ability to meet objectives / Result orientation.


• With attention to detail/ Rigorous.


• Collaboration and teamwork.

Benefits

• Training programs, career plans and internal mobility opportunities, national and international thanks to our presence in different countries.


• Diversity and Inclusion Committee that ensures an inclusive work environment. In recent years, several employee communities have been created to organize diversity and inclusion awareness actions (PRIDE, We Generations and MixCity).


• Corporate volunteering program (1 Million Hours 2 Help) in which employees can dedicate time out of their working hours to volunteer activities.


• Flexible compensation plan


• Hybrid telecommuting model (50%)


• 31 vacation days.

Diversity and Inclusion commitment

BNP Paribas Group in Spain is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity/paternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency, which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients.

About Our Culture

We are proud to create, maintain, and develop strategic business applications for BNP Paribas Personal Finance entities worldwide, maintaining high service levels and delivering added value to our customers. In our multicultural environment, we encourage all team members to develop their talents and skills, providing a wide variety of career opportunities and internal mobility programs within local SET teams or across other entities in the Group, both in Spain and globally.

We value the experience of our employees and work to maintain a balanced environment, offering flexibility regarding work schedules and respect for personal time. Our hybrid working model is a testament to our belief that social connection enhances our daily activities.