Control and Governance Officer Idras Bnp Paribas

**CONTROL AND GOVERNANCE OFFICER**

**Who are we?**

Solid reputation, passionate individuals, and endless opportunities. That's SE.T - the BNP Paribas Personal Finance South Europe Technologies SSC.

Our consistent track record of services delivery means comfort for our customers and opportunities for our employees.

You will find SE.T to be full of energy and an Inclusive Workplace in which you truly can make a difference.

We are the IT, Data, and Operations Shared Service Center of BNP Paribas Personal Finance. We deliver solutions to entities worldwide, including Cetelem, specializing in financial partnerships with major retailers, consumer goods companies, and car dealerships.

Our services include:

- Applications Management
- IT Risks & Cybersecurity
- Platforms Management
- Data Analytics & AI
- Operations

We are based in Spain (Madrid) and Portugal (Lisbon, Porto), with 240+ employees skilled in various technologies and operational roles.

**About the job**
We are currently seeking a Control and Governance Officer to coordinate the 1st Line of Defense of the Permanent Control framework within South Europe Technologies, ensuring operational risks are covered by a robust and sustainable control framework.

**Mission**
The Control and Governance Officer supervises and monitors the LOD1 permanent control framework, including fraud management, recommending improvements where necessary. The role involves supporting local business functions, ensuring risks are identified, assessed, and mitigated through updated RCSA frameworks, and ensuring local governance fosters a culture of risk awareness. The officer escalates alerts to the CEO/COO and ensures fraud risks are properly addressed.

**Responsibilities**
Identification & Self-Assessment of Operational Risks and Controls (RCSA):

- Ensure risks, processes, and controls are identified and updated
- Synthesize risk assessments and control results for validation by management
- Monitor remediation plans and ensure consistent RCSA updates

**Management of Operational Risk Incidents**:

- Ensure incidents are reported, escalated, and analyzed to define corrective measures
- Maintain and update records of incidents in the Group database, including fraud cases
- Follow-up on significant incidents and remediation actions

**Management of Potential Incidents**:

- Coordinate risk assessments and ensure consistency with the entity's risk appetite
- Ensure action plans address potential incidents and promote risk awareness

**Procedures**
- Ensure procedures are aligned with the Group's guidelines and updated as needed according to the evolution of SET situation
- Define fraud alert management frameworks and collaborate with relevant teams
- Store and communicate procedures to stakeholders

**Action Plans & Recommendations**:
**Governance & OR Committees participation**:

- Define IT governance and risk management principles and support their deployment
- Organize IT governance committees and coordinate activities related to IT governance
- Coordinate TAC/NAC validation processes for exceptional transactions, new products/activities/processes
- Participate actively in committees on Operational Risks and Permanent Control, preparing agendas, presentations, and follow-up actions
- Contribute to periodic and ad-hoc operational risk reporting

**Controls & Control Plans**:

- Regularly update control plans based on risk assessments and oversee their execution
- Ensure management reviews control results and defines appropriate remediation actions
- Monitor and track the implementation of control results and action plans

**Awareness, Training & Advisory**:

- Ensure employees are trained on operational risks and permanent control frameworks
- Act as a relay for risk awareness initiatives and implement fraud risk training programs

**Skills**

**Behavioral**
- Organization and autonomy
- Adaptation
- Critical thinking and proactivity
- Communication skills
- Resilience
- Collaboration and teamwork

**Transversal Skills**:

- Analytical thinking, networking, project management

**Core Business Competencies**:

- Expertise in operational risk management, internal audit, compliance, fraud, and data intelligence Proficiency in IH/IP 360 for incident registration and risk assessment tools
- Strong knowledge of Excel and PowerPoint

**Language Proficiency**:

- Fluent in English
- Other European languages are a plus

**Our Culture**
We develop business solutions for BNP Paribas Group entities, maintaining a high level of service and providing added value to our clients. Our inclusive, multicultural environment fosters career development through training, internal mobility, and flexible work schedules. We embrace hybrid working and offer a range of benefits.

**Benefits**
- Career development, training programs, and internal mobility
- Diversity and inclusion initiatives, including employee communities like PRIDE and MixCity
- Corporate volunteering programs and flexible compe