Project & Privacy Operations Manager Risk Hub

PROJECT & PRIVACY OPERATIONS MANAGER

BNP Paribas is a top-ranking bank in Europe with an international profile. It operates in 71 countries and has almost 199 000 employees. The Group ranks highly in its three core areas of activity: Domestic Markets and International Financial Services (whose retail banking networks and financial services are grouped together under Retail Banking & Services) and Corporate & Institutional Banking, centered on corporate and institutional clients. The Group helps all of its clients (retail, associations, businesses, SMEs, large corporate and institutional) to implement their projects by providing them with services in financing, investment, savings and protection. In its Corporate & Institutional Banking and International Financial Services activities, BNP Paribas enjoys leading positions in Europe, a strong presence in the Americas and has a solid and fast-growing network in the Asia/Pacific region.

ABOUT THE BUSINESS LINE AND FUNCTION

The Group Data Protection office is part of the RISK Department within BNP Paribas. It is a part of the 2nd line of defence under the Bank’s Group Data Protection Officer. It supports the network of Data Protection Officers, Correspondents and specialists across the Group and its entities. The department has responsibility for identification of key Data Protection risks to the Bank and influencing business and technology partners to take sound risk management decisions. This is achieved through the below competency areas:

- **Governance **establishes the 2LOD Data Protection framework aligning with wider risk frameworks and regulation.
- **Advisory** - Supporting Data Protection initiatives and projects across the Group with risk opinion on Data Protection Topics. Promote the risk based approach and leverage DPIA practices to facilitate risk reduction and enable Group Data Protection readiness.
- **Performance Management and Assessment **- Delivering the framework to measure Data Protection maturity across the Group. Validate and support action plans and support teams to improve maturity and mitigate identified risks. Globally facilitate the mobilisation of best practices across business lines / territories.
- **Privacy Operations -** Delivers tactical support to GDPO practice areas and DPOs/DPCs/SPOCS in support of Data Protection activities. First point of contact for queries from the Data Protection community and oversees the RUN and evolution of existing Data Protection automation. Responsible for the execution of complex and strategic Data Protection topics and custodian of the GDPO communications and training plans.
- **Privacy Tech** - Lead and support advisory on implementation of IT and technical controls necessary to comply with Data Protection requirements and regulations including Privacy by Design, security measures, Cyber Security training, SME support and tech innovation.

ROLE’S RESPONSIBILITIES

Direct Responsibilities:

- Lead Project Management for Group Data Protection Office project portfolio.
- Lead Functional support provided by operational team to Data Protection tooling.
- Oversee the reporting of key metrics by the Global Data Protection community and the reporting mechanisms used.
- Foster a collective and integrated risk culture and attitude to Data Protection.

Contributing Responsibilities:

- Contribute to preparation of Group Data Protection reporting against key metrics and provide related support.
- Support enhancement and evolution of Group Data Protection tooling and optimize reporting mechanisms.
- Support communications, training and awareness initiatives managed by the Group Data Protection Office to include tooling and automation awareness.
- Assist cross team projects / global initiatives sponsored by the Group Data Protection Officer.
- Support coordination of the Data Protection Officer / Correspondent network across the Group and its entities (global).

Direct management of another team member.

TECHNICAL COMPETENCIES
- Solid Experience in Project Management.
- Strong interest and/or experience in Cyber Security topics and Data Protection - CIPP/E is optional.
- Developing understanding of the regulatory environment.
- Multi-media: active knowledge and experience of digital technologies.
- Fluent in English (mandatory) and French (desired).

BNP Paribas Grupo en España es un empleador que ofrece igualdad de oportunidades y se enorgullece de brindar igualdad de oportunidades de empleo a todos los que buscan trabajo. Nos comprometemos activamente a garantizar que ninguna persona sea discriminada por motivos de edad, discapacidad, cambio de género, estado civil o de matrimonio, embarazo y maternidad/paternidad, raza, religión o creencias, sexo u orientación sexual. La equidad y la diversidad están en el centro de nuestra política de contratación porque creemos que fomentan la creatividad y la eficiencia, lo que a su vez aumenta el rendimiento y la productividad. Nos esforzamos por refleja