It Risk And Control Specialist

Responsibilities

Direct Responsibilities

• Overall responsibility for the Risk and Control function for the assigned IT Business Units
• Identification and assessment of IT risks and IT controls as per group guidelines
• Define and regularly update the entitys IT control plan according to the outcome of the risk assessment, regulations, and other risk events.
• Identify control gaps and propose solutions and ensure control gaps are adequately addressed
• Identify system/ control deficiencies and propose solutions to strengthen the control environment
• Monitor controls are performed as per the defined control plan
• Ensure timely and comprehensive contribution to Risk Governance committee meetings.
• Follow-up and contribute to close recommendations/permanent control actions/incident remediation actions.
• Ensure operational risk incidents are reported as per the BNP Paribas Incident reporting policy and implementation of corrective and preventive actions
• Ensure appropriate training and awareness on Operational Risks are provided to employees.
• Ensuring all key risks & control deviations reported to Senior management along with corrective action plan and Control Results updated accurately with all the deviations
• Ensure that the Head of Department is properly informed, that issues are escalated in a timely manner and that sufficient information is provided to form appropriate judgments

Contributing Responsibilities

• Mentor/Train junior staff members as and when required
• Contribute to the upkeep and maintenance of the Permanent Control Framework.
• Provide support and/or manage key transformation projects where needed, and take them to a successful conclusion
• Active participation on adhoc tasks and/or projects as assigned by Management from time to time

Technical & Behavioral Competencies

• Undergraduate Degree in Computer Science or related field is required; Advanced Degree (MS) is desired. CRISC (Certified in Risk and Information Systems Controls) and/or CISA (Certified Information Systems Auditor) is preferred, or CISM (Certified Information Systems Manager) or CISSP (Certified information Systems Security Professional) will be helpful, 
• Minimum of Seven years recent experience in Information Technology audit, or as hands-on” IT control tester in first or second lines of defense 
• Working knowledge of COBIT methodology and NIST framework; familiarity with US FFIEC IT Examination guidelines (e.g., Development and Acquisition IT Handbook) will be helpful, but not required
• Strong background with principles and techniques of testing IT general controls, infrastructure controls, and application controls 
• Excellent communication skills (verbal, written), interpersonal skills, and interviewing skills
• Strong risk and control awareness, and knowledge of risk assessment methodology
• Motivated self-starter, exceptional analytical abilities, strong organization and teamwork skills
• Experience working in large global financial services organization 
• Be able to demonstrate business tactical and strategic thinking, be innovative and creative with an ability to think outside of the box
• Be comfortable discussing or reporting the results of IT control testing with the bank’s management 
• “Hands-on” IT Operations experience is a plus
• Experience working in IT Development and/or IT Production setting
• Ability to: 
• Collect and analyze complex information
• Work under pressure
• Good time management on complex and multiple tasks
• Should be comfortable to work in NAR shift timings

Knowledge of Project Management methodology (e.g. PMP, Prince2) is a plus

Experience Level