Head of RISK ORM (Business / Functions)

Located within the RISK Function of BNP Paribas (BNPP), the role of the Head of RISK ORM is to ensure that the components of the operational risk management framework are implemented and operating effectively within ISPL, and to provide RISK ORM management and Business senior management with relevant, synthetic, transparent, exhaustive and consistent information and a front-to-back view of operational risk across ISPL activities. To achieve this objective, this 2nd line of defense (LOD2) role works closely with RISK ORM Regional and Central teams and with ISPL management and stakeholders.

RISK ORM ISPL mandate is to independently challenge and supervise the operational risk management framework of ISPL activities as described in level 2 procedure Organizational framework and governance for Operational Risk Management & Permanent Control Framework. This includes control framework adequacy checks, independent challenge, proximity with the business and contribution to the sign-off process on key decisions.

Due to the global and regional models applied by the BNP Paribas (BNPP) activities outsourced to ISPL, the role covers as well the contribution to reviews, control testing, analysis and reports carried out under the supervision of the RISK ORM Regional and Central teams.

In addition, the Head of RISK ORM ISPL is responsible to ensure that the services outsourced to the RISK ORM ISPL from RSIK ORM APAC/other regions are provided with the required level of quality and within the timelines prescribed.

In this context, the Head of RISK ORM ISPL, is member of the RISK ORM APAC Executive Committee and RISK ORM CIB Executive Committee, Central. The incumbent reports hierarchically to the Chief Risk Officer ISPL and with functional Regional Reporting.

Key Responsibilities

As the 2nd line of defense, the Head of RISK ORM has the following general responsibilities for the operational risk processes and themes within the scope of RISK ORM (including fraud, third-party risk management):

• ensuring consistent application of the BNPP group and Group RISK ORM methodological framework and procedures, and adapting locally as required; assist and advise the 1st Line of Defence (LoD1) in ISPL in this respect, in liaison with relevant RISK ORM APAC and Central teams;
• independent challenge of the identification and assessment of the operational risk profile (actual, potential or emerging) and of the risk mitigation framework, coming from the operating entities:
  • either during a regular exercise, such as the review of the RCSA (Risk & Control Self-Assessment),
  • or by participating to the decision making process (such as a validation process, granting of exemptions or the definition of a remediation plan);
• ensuring effective implementation of risk mitigation strategies, framework & actions with LoD1, through implementation of relevant indicators, follow up of action plans and independent challenge of controls;
• contribution to further raising operational risk awareness, disseminating operational risk culture and training on the risk mitigation framework; development of a strong partnership with and support LoD1 key stakeholders in ISPL on operational risk matters;
• independent assessment and alert highlighted to management and key stakeholders as required, on the level of risk and on the risk mitigation framework status;
• contribute to the opinion to be expressed by the RISK ORM teams in relation to New Activities Approval Committees (NAC) and Transaction Approval Committees (TAC) and involving activities to be outsourced to ISPL;
• implement and contribute to the operational risk governance bodies, such as the ISPL Internal Control Committees (and other operational risk forums);
• prepare and submit the relevant operational risk reports under RISK ORM ISPL direct responsibility, and contribute the 2nd level of defence opinion on the operational risk reports produced by ISPL 1st line of defence (semi-annual report on controls; annual operational risk and control report, );
• act as a local correspondent for transversal themes under the responsibility of RISK ORM, such as third party risk management, and anti-fraud topics;
• coordinate with the relevant RISK ORM ICT and data protection officers in the Territory / Regional or Central;
• contribute to RISK ORM APAC & global initiatives (e.g. projects).
• Operate BNPP fraud alert management and investigation framework for the part assigned to the LoD2 (incl. suspected, attempted frauds), in liaison with the RISK ORM APAC Anti-fraud team;

In addition, the Head of RISK ORM ISPL ensures assistance to his/her peers working in other independent LoD2 roles, including compliance, legal, finance, and tax risk management, whenever expertise on its themes or processes is required or requested.

In relation to the services provided by RISK ORM ISPL to RISK ORM APAC or to other Regions, the Head of RISK ORM ISPL should ensure that they are in line with the SLA in place, the quality is satisfactory and the deadlines met.

Contribute to the RISK ORM deliverables as per the Beneficiary requirements and ensure appropriate documentation across RCSA, LOD2 controls on LOD1, transversal topics, projects and initiatives. Review KPIs as per the defined terms adhering to the SLA requirements with periodic stakeholder meetings and mutualize activities across defined activities.

Stakeholder, Team and People Management

Competencies (Technical / Behavioural)

Background:

Soft skills:

Specific Qualifications Required