Application Production Support - MS Cyber Security Architect

About Business line/Function:

BNL's Information Technology (IT) Area is a partner of the bank and the companies of the BNL BC Group for the digital evolution of operational and business models through the design, planning and implementation of distinctive, reliable and sustainable technological solutions.

IT Production Unit reports functionally to the ITG (Informatique Technologies Groupe) department of the parent company, is functionally responsible for the IT structures of the companies of the BNL BC Group and coordinates the IT community of the BNPP Group in Italy, with the aim of obtaining all possible synergies of purpose, ensure full operational consistency and enable the digital transformation of our Group. As part of IT Production BNL, Application Production is responsible for supporting the IT production applications for BNL.

BNL Production Security activities are critical and highly visible, serving a population of over 11000 users.

BNL Production Security has a roadmap to ensure security while reducing support time. Therefore, BNL Production Security is hiring experienced IT professionals who are open minded, willing to learn and to be part of the transformation roadmap.

• Leveraging BNL and BNP Paribas Paris teams expertise and ISPL IT skills, the goal is to enable applications flawless production by providing secure and stable Digital Working environments and by ensuring that all actions on production environments are done in a controlled manner.
• As part of strengthening the protection of its IT systems and the implementation of its Cyber Security
• programme, BNL and the BNP Paribas Group implements and operates a number of security solutions.
• The Microsoft Cyber Security Architect's main duties are:
• Perform operations supported by security solutions
• Manage Active Directory infrastructures both functionally and technically
• Support vulnerability management operations
• Provide assistance and support to users
• The teams scope will be expanded in the future beyond the first set of described activities. The team is also expected to work closely with their BNL and BNP Paribas colleagues to integrate new technologies, especially related to the new generation BNP Paribas Cloud and DevOps methods & toolchains.

• Analysis of periodic Vulnerability Assessment (VA) reports, remediation processing and supervision of the execution of the remediation or direct execution of the remediation on the Digital Working (DW) side.
• Analysis of periodic Health Check (HC) reports, remediation processing and supervision of remediation execution or direct remediation execution
• Periodic scanning of Active Directory domains (ITA, BNL4ATM) for vulnerability detection using PingCastle tools. Analysis of discovered vulnerabilities, remediation planning and supervision of remediation execution or direct remediation execution in charge of DW.
• Execution of remediation identified by BNPP extraordinary initiatives (e.g. compliance campaigns such as the GAP)

For each remediation the Microsoft Cyber Security Architect's should be able to perform:

o Impact assessment

o Elaboration of a change process and rollback procedure

o Elaboration of an application plan (test, pilot, entire population)

o Supervision of remediation application or direct execution

• Ensure that SLA targets are met for above activities
• Handover to Italian teams if knowledge and skills are not available in ISPL
• Coordinate closely with Rome IT Production Security Team and all other BNL BNP Paribas IT teams (Incident coordination, Security, Infrastructure, Development teams, etc.)

• Contribute to the knowledge transfer with BNL Production Security team
• Contribute to the definition of procedures and processes necessary for the team
• Help build team spirit and integrate into BNL BNP Paribas culture
• Contribute to incidents analysis and associated problem management
• Contribute to the regular activity reporting and KPI calculation
• Contribute to continuous improvement actions, especially the lessons learned from handovers to Paris
• Contribute to the acquisition by ISPL team of new skills & knowledge to expand its scope

• Knowledge of ITIL
• General IT infrastructure knowledge

Microsoft Active Directory administration and configuration:

o Certification Authority

o DNS

o Global Policy

o ADFS

• Basic knowledge of Multifactor authentication (Smartcard, RSA)
• Experience with ticketing system (Service Now)
• Good written and spoken English
• Measure and identify areas for improving Quality and overall Delivery
• Able to communicate efficiently
• Good Team Player
• Knowledge of Operative system (Microsoft)
• Knowledge of Power Shell

Good to have

• Knowledge of DNS/DHCP systems (Infoblox)
• Knowledge of Microsoft Identity Manager

Basic knowledge of Italian language can be an advantage

Skills Referential

BehaviouralSkills:

• Ability to collaborate / Teamwork
• Client focused
• Ability to deliver / Results driven
• Ability to share / pass on knowledge

Transversal Skills:

• Analytical Ability
• Ability to set up relevant performance indicators
• Ability to develop and adapt a process
• Ability to understand, explain and support change

Education Level:

Bachelor Degree or equivalent

Experience Level

At least 5 years