IT Operational Permanent Controller

South Europe Technologies (S.ET Iberia) is one of BNP Paribas Personal Finance's shared‑services centres, dedicated to delivering outstanding IT solutions to BNP Paribas Personal Finance entities worldwide.

Areas of focus:

• Applications Management (Architecture, Project Management, Development, and Quality Assurance)
• IT Risks & Cybersecurity Services
• Platforms Management
• Data
• Ad‑hoc, T&M Development

In this context, we are looking for an
IT Operational Permanent Controller (OPC)
to join our team.

MISSION

Integrate the Operational Permanent Control activities, under the direction of the IT OPC of PF, to pilot with other teammates the implementation and execution of all or part of the Operational Risk Management (ORM) device of BNP Paribas Personal Finance (PF).

Your Main Activities Will Include

• Deploy all or part of the risk procedures and best practices in Risk Management in the area of controls and associated mitigation plans.
• Analyse results, identify failures, and report outcomes.
• Capitalise on controls, guidelines, and associated indicators (RAS, KRI, KPI).
• Animate, analyse, and consolidate these topics to improve risk control at PF by:
• Participating in communication/training sessions for management and Risk/Security/Continuity experts in subsidiaries.
• Preparing for and joining, as needed, various IT‑Risk steering committees.
• Reporting to the team, management, and PF subsidiaries on the situation and potential remediation action plans by creating synthetic and relevant indicators and dashboards.

OPERATIONAL RESPONSIBILITIES OF THE IT OPC:

INCIDENTS
– Manage incidents and ensure knowledge sharing on major historical incidents with local OPCs.

• Ensure registration of incidents for own activities, centrally, in accordance with procedure RISK 0332.
• Record historical incidents listed in the RISK360 and SNOW ITSM tools within the scope of the function and ensure implementation of action plans.
• Perform regular incident analysis (reporting accessible in 360) to decide on updates to procedures and/or control plans.

RCSA (Risk Cartography and Risk Assessment)
– Analyse risks related to the function/business in connection with Ensure proper completion of the RCSA for the function in accordance with procedure RISK 0325 (own processes, central function).

• Define generic pairings (Risk Event / Process) and associate applicable controls (triplets).
• Validate pairings with relevant LoD2 teams and transmit results to all local entities (local OPCs) for application and completion of the RCSA in coordination with the CCO (Central Control Office).
• Point of entry for subsidiaries
  – Ensure:
• Relevance of the system (updates, enhancements, deployment monitoring).
• Compliance of the system with Group procedures and regulatory requirements.
• Main contact for activities in France (OPC PF France, ITRO France, RISK France Direction – 50 % of activity focused on France).
• Eventually master the IT OPC system, always with a focus on continuous improvement.

IT Tools

• Management of the MS Office package (Excel, PowerPoint, SharePoint, etc.).
• Ticketing tools (Service Now, Jira, …).

WHAT ARE WE LOOKING FOR:

• Experience
  – More than 5 years of proven working experience in risk management and IT professions.
• Business and transversal skills
  – Skilled in data manipulation, with sensitivity to data quality and reliability.
• Personal skills
• Critical analysis and questioning.
• Strong communication skills (written and oral), especially in leading meetings.
• Pedagogy – ability to share and transmit knowledge.
• Adaptability.
• Valuable (nice‑to‑have) skills
  – Knowledge of risk methodology.
• Language skills
• English: C1 or higher (oral and written) – mandatory.
• French: B2 – C1.

BENEFITS:

• Training programmes, tailored career paths, and opportunities for internal mobility (national and international) supported by our global presence.
• Diversity & Inclusion Committee working to create an inclusive work environment, with employee communities organising awareness activities (PRIDE, We Generations, MixCity, etc.).
• Corporate volunteering programme (1 Million Hours 2 Help) supporting community engagement.
• Flexible compensation plan.
• Hybrid telecommuting model (50 %).
• 31 vacation days.

Diversity and Inclusion Commitment

BNP Paribas Group in Spain is an equal‑opportunity employer, proud to offer equal employment opportunities to all job seekers. We are deeply committed to ensuring that no individual is discriminated against based on age, disability, gender reassignment, marital or civil‑partner status, pregnancy and maternity/paternity, race, religion or belief, sex, or sexual orientation. Equity and diversity are at the heart of our recruitment policy because they foster creativity, efficiency, performance, and productivity.

ABOUT OUR CULTURE:

We create, maintain, and develop strategic business applications for BNP Paribas Personal Finance entities worldwide, delivering high service levels and added value to our customers.

In our multicultural environment we encourage team members to develop their talents and skills, offering a wide variety of career opportunities and internal‑mobility programmes within local S.ET teams or across other Group entities, both in Spain and globally.

We value employee experience and strive for a balanced environment, offering flexibility regarding work schedules and respect for personal time. Our hybrid working model reflects our belief that social connection enhances daily activities.

Diversity and inclusion are core values; S.ET is an equal‑opportunity employer, committed to providing employment opportunities regardless of ethnicity, beliefs, religion, nationality, age, sex, sexual orientation, marital status, or political opinions.