Cib Ai and Data Protection Expert

**POSITION PURPOSE**:
The first line of defence (Business, IT and CDO) has the responsibility to embed data protection regulations and Group policies and guidelines in the internal organization and processes within its perimeter (e-g Privacy by Design. DPIAs, security measures, etc.)

**Key Responsibilities**

The AI and DP Expert is a risk professional role with three key dimensions of responsibilities:
1) **Contribution within RISK ORM CIB** - The role will provide guidance on AI and Privacy aspects and will support CIB DPO, other DPCs and other stakeholders within the Data Protection community including within BNP Paribas Group DPO team,, contributing through documented RISK Opinions to the wider management and coordination of projects by the ORO - AI and ML Expert manager at global RISK ORM CIB level, in relation to privacy and data protection topics.

2) **AI regulatory and technical expert**- The role will be able to understand AI technologies, supported by enthusiasm with regards to AI applicable regulations.

3) **Privacy expert** - Be the central point of contact and expertise for any privacy related aspects across RISK ORM CIB on AI use cases.

Its activity is part of the overall governance of personal data protection deployed throughout BNP Paribas CIB and it is based on the following key responsibilities:

- Advice on the implementation of the Group AI Framework within CIB to meet regulatory AI requirements.
- Attend AI-related meetings and committees with internal stakeholders in first and second level of defence to identify, discuss and assess risks specific to AI projects.
- Perform second line of defence control and challenge to the first line of defence.
- Supervise the implementation of Privacy by Design principles from a technical and security perspective (e.g. pseudonymization, data minimization, etc).
- Monitor and review of the AI architectures to identify potential privacy risks (e.g. data segregation)
- Review and advice on the technical measures for the data protection within the AI systems (e.g. encryption, tokenization, etc)
- Provide technical opinion regarding applicable privacy assessments and/or documentation (e.g. ROPAs, DPIAs, LIAs, etc)
- Interlock and challenge the first line of defence (IT, Security, etc) regarding “in progress” AI projects
- Provide technical advice regarding AI risk remediation and remediation
- Contribute to AI literacy strategy across CIB teams.
- Support DPOs and DPCs to define the future set-up within CIB to monitor AI projects under the governance framework.
- Oversee performance indicators (KPIs) to monitor the evolution of AI risks and measure the effectiveness of the framework.
- Contribute to role development by validating data protection requirements for new AI initiatives activities
- Propose recommendations for continuous improvement of AI risk management processes.
- Ensure regular reporting to DPO and RISK ORM CIB about AI initiatives.
- Alert DPO when an AI initiative is under operational risk to propose correction solutions

**Experience and Skills**

**Other required skills are**:

- Team-player - focus on the success of the whole team. Working well both with others, as well as individually.
- Good stakeholder management skills.
- Good listening and analytical skills - being able to come to a thoughtful and business focused conclusion quickly.
- Ability to co-operate and work well with others adopting an approachable style - Important as we work closely with a large and diverse set of stakeholders.
- Ability to see the business perspective, i.e. from a business point of view, the most secure solution is not always workable or realistic considering costs and benefits.
- Demonstrating a calm professional approach, with a good understanding of delivery within time constraints and the need to escalate/inform departmental management as appropriate.
- Adapting personal approach to suit situations, individuals, groups and cultures. Is flexible in relation to getting the job done.
- Taking accountability for their actions and be open and honest when things have gone wrong and celebrating successes when things have gone well.
- Being rigorous and thorough - especially when logging and tracking issues through to conclusion.
- Ability to manage their workload as to meet the realistic targets and priorities set in conjunction with management.
- Demonstrating a high-level of commitment and self-motivation, combined with enthusiasm and a genuine interest in the role of AI in business.
- Ability to express views clearly and fluently, both orally and in writing. Considers the audience, avoiding technical jargon wherever necessary and appropriate. Excellent executive presence.
- Fluent English.

**Specific Qualifications Required**
- Engineer in Computer Science, Telecommunications, or similar Grade in Engineering / Technology.
- 7+ years’ experience in Information Technology in roles where is necessary to advise, review and/or design IT solutions (e.g.