IT Security Engineer Bnp Paribas Cib

**IT Security Engineer BNP Paribas CIB**

**WHO WE ARE?**

BNP Paribas is one of the euro zone’s leading banks, with nearly 200 000 employees in 74 countries with key positions in its three main activities: Retail Banking, Investment & Protection Services, International Financial Services and Corporate & Institutional Banking.

**OBJECTIVES**
IT Security area is providing services to the Spanish entities and platforms included in the perimeter.
The aim of the department is to protect any kind of information, which could have negative impact for the Bank in case of loss, theft, alteration or disclosure. The main responsibility of the IT Security Engineer is maintaining and improving the level of security by focusing on the day-to-day responsibilities and projects.

The mission covers two major activities**: IT Security **and **IT Continuity** described below.
- **IT Security Engineer**:

- **CIB Spain CISO (Chief Information Security Officer) Office**:

- Be the contact of the IT Risk and cybersecurity stakeholders in the perimeter
- Collaborate with central projects related to data security, digital signature, awareness, etc.
- Maintain local governance updated and ensure coordination with the businesses in the perimeter
- Approve IT Security exceptions for the business
- Monitor controls on different IT Security topics
- Report control results and evidences in the Generic Control Plan and Risk and Control Self-Assessment (RCSA)
- Follow-up all queries and requests received from users
- Implement digital certificates
- Help businesses to answer IT Security questionnaires (internal, regulatory and clients)
- Participate in the IT Security Steering Committee twice a year
- **Local CSIRT (Computer Security Incident Response Team)**:

- Responsible for handling cybersecurity incidents impacting assets and operations
- Report to Operational Control teams of the businesses in the perimeter
- **Cyber culture**:

- Collaborate with central teams in the dissemination of the IT & Cyber Risk Culture and tests campaigns
- Ensure Safe Desk policy implementation by performing annual test and assess maturity
- **Identity Access Management**:

- Approvals, re-certifications, reconciliations and business support
- Assist auditors to verify the compliance with CIB IAM policies
- **IT Continuity**:

- **ICO (IT Continuity Officer)**:

- Local SPOC for Global IT Continuity team
- Organise and run governance for IT Continuity
- Deploy, maintain and manage an appropriate IT Continuity Framework for existing assets and projects
- Raise awareness, involve and train all players in their scope
- Participate in the IT Continuity Steering Committee
- Produce appropriate reporting at Group level

**SKILLS**:

- **Soft skills**:

- Ability to work in an international context (fluent English spoken is mandatory)
- Ability to synthetize / simplify
- Resilience
- Ability to collaborate, teamwork
- Ability to develop and leverage networks
- Looking for a high quality service
- **Technical skills**:

- Project management methodology
- Risk analysis & anticipation
- Security & Safety
- English C1
- BNP Paribas organization knowledge, although not mandatory is a plus