BNP Paribas Hiring For IT Security, Risk Control Lead – Manager / AVP at Mumbai Full Time

• The Governance Lead role is to ensure the appropriate and robust IT Security, Risk and Control polices, processes are implemented & adhered-to by all stakeholders in the department. They would be responsible to monitor, report and assist teams in being compliant with the policies laid out by the Bank.
• Function as the single point of IT contact for key elements such as enterprise IT policy governance, enterprise IT strategy, IT internal audits, and IT risk acceptance.

• Ensure strong and effective Risk Management- including operation risk
• Manage transformation, improvement & control initiatives aligning with global strategies. Ensure strong collaboration and partnership of Global Banking – ISPL with responsible global teams
• Help develop and implement processes to assess and/or monitor the effectiveness of Applications IT Security, risk and control procedures to ensure adherence to standards and policies as appropriate. Contribute to all aspects of the delivery lifecycle to provide guidance to the teams that ensures secured development of applications
• Create and share reports with IT management, identifying and highlighting observations and suggesting options and recommendations
• Serve as an expert to guide & review security testing requirements for applications in scope
• Provide technical expertise testing to project teams guiding them when needed

Contributing Responsibilities

• Collaborate with other ISPL functions to identify and implement consistent and effective approaches to security, risk, governance and control-based activities

Technical & Behavioral Competencies

• Strong understanding of Application security including DevSecOps framework. Good knowledge of OWASP, OSSTMM, SANS and other application security standards and best practices
• Strong understanding of IT Risk Management
• Expert level understanding of application security practices
• Keen desire to be at the leading edge of technology and process practices
• Ability to work under minimal supervision
• Strong analytical, interpersonal skills
• Must have the ability to interact professionally with a diverse group of developers, tester engineers, and managers. Ability to work well with culturally diverse global teams
• Excellent written and oral communication skills

Specific Qualifications (if required)

• Minimum 7 years of relevant experience and proven accomplishments in IT security, Risk & Controls

• Ability to deliver / Results driven
• Attention to detail / rigor
• Adaptability
• Ability to share / pass on knowledge

• Analytical Ability
• Ability to anticipate business / strategic evolution
• Ability to manage a project
• Ability to manage / facilitate a meeting, seminar, committee, training
• Ability to inspire others & generate people’s commitment

• Bachelor Degree or equivalent

• At least 10 years

• Relevant industry recognized security or Risk certifications like CISSP / CISM, etc.