Vice President - ICT/Technology Risk Manager

Company: BNP Paribas Investment Partners USA Holdings, Inc.
Location: New York
Posted on: November 11, 2019

Job Description:

Business Overview: The Intermediate Holding Company ( IHC ) program structured at the U.S. level across poles of activities of BNP Paribas provides guidance, supports the analysis, impact assessment and drives adjustments of the U.S. platform s operating model due to the drastic changes introduced by the Enhanced Prudential Standards ( EPS ) for Foreign Banking Organizations ( FBOs ) finalized by the Federal Reserve in February 2014, implementing Section 165 of U.S. Dodd-Frank Act. Fully integrated in the BNP Paribas Group, BNP Paribas Corporate and Institutional Banking (CIB) is a leading provider of solutions to two client franchises: corporates and institutional, and operates across EMEA (Europe Middle East Africa), APAC (Asia Pacific) and the Americas. The bank is a global leader in Debt Capital Markets and Derivatives. It is a top European house in Equity Capital Markets and it has leading franchises in Specialized Financing. In Securities Services, it is a top five House worldwide. BNP Paribas CIB strives to service the global economy by providing solutions to its clients in financing (ECM, DCM, specialized financing), flow banking (trade finance and cash management), financial advisory (M&A, project finance), global markets (interest rates, credit, foreign exchange, equity derivatives), risk management, and securities services. Information and Communication Technology (ICT) is a strategic consideration for BNP Paribas. ICT risk is the chance or possibility of harm being caused to a business as a result of a loss of the confidentiality, integrity or availability of ICT assets. ICT risk management is the optimization of the information asset/control relationship in the context of a cost/benefit analysis and in alignment with the organization s overall risk appetite. Second line Risk Managers are responsible for the aggregate entity and group-wide ICT risks, and are granted independent authority to effectively test and challenge the first line s approach to ICT Risks. Responsibilities: The ICT/Technology Risk Manager within the BNP Paribas RISK ORC ICT Organization is responsible for managing the day-to-day execution of the ICT Risk Management function (2LOD) and to provide independent oversight and guidance across both direct and indirect areas of responsibility for the CIB Americas set of operating entities. The day-to-day focus may vary depending on the requirements of the overall program across CIB Americas and may include: independent testing, review of ICT projects, risk assessment, risk reporting, check and challenge, development of new tools and methodologies, etc. Key responsibilities include: * Undertake transversal and vertical assessments of risk exposures, identifying ICT risks, evaluating their potential business impact and reviewing the strengths and weaknesses of existing controls; * Analyze risk data from various sources (e.g. external events, control deficiencies, risk register) to identify and measure levels of risk, concentration, trends and patterns; * Work with 1LOD and 2LOD to recommend strategies that effectively treat the risks within the risk appetite (e.g. controls improvement to mitigate an ICT risk); * Perform check and challenge of 1LOD risk processes, data and outcomes (e.g. risk assessments, control evaluations, risk metrics, mitigation plans, risk acceptances, etc.), communicate risk opinions at various levels of management; * Once new/modified controls are in place, continue to monitor control effectiveness and the risk & control environment to determine whether incremental improvements are required to ensure that risk exposures are within acceptable limits; * Ensure adherence to ICT risk management standards and procedures, including and not limited to: * Developing and issuing ICT risk management reports and risk opinions * Maintaining working papers to substantiate and ensure objective basis for the risk opinions; * Establish administrative procedures to verify adherence to standards and procedures; and * Developing approval procedures and guidelines on ICT risk by type of product or transaction (if applicable) e.g. procedure related to new initiatives with significant ICT components. * Initiate timely escalations to the Head(s) of RISK ORC ICT and Chief Risk Officer(s) where appropriate; * Counsel business unit managers (e.g. Front Office) on ICT risk management issues to ensure awareness and accountability for ICT risks; * Collaborate with other 2LOD functions and teams across the Americas and Group on common priorities/projects (e.g. IHC-level processes, Group-level initiatives); and * Participate in evaluating new products/changes/projects and assess the related ICT risks and impact to the organization s risk profile. BNP Paribas is committed to providing a work environment that fosters diversity, inclusion, and equal employment opportunity without regard to race, color, gender, age, creed, sex, religion, national origin, disability (physical or mental), marital status, citizenship, ancestry, sexual orientation, gender identity and gender expression, or any other leg ally protected status. Minimum Required Qualifications * Practionner experience (10 years minimum) in Information Security or Cyber Security * 7 years leading information security risk assessment or related risk management activities. * Bachelor s degree (Information Technology or Information Security preferred) * Extensive knowledge of technology and banking products in an operating environment * Excellent written and verbal communication skills including the ability to write executive-level communication as well as more detailed, technical reports * Practical experience with Operational Risk Management practices (e.g. RCSAs, Risk Scenarios) * Ability to work collaboratively by building consensus and influencing decision making to foster forward progress with projects and initiatives. * Excellent organizational skills, coupled with ability to be versatile and flexible * Sound judgment and critical thinking * Demonstrated ability to work independently and within a team Preferred Qualifications: * CRISC / CISA /CISM / CISSP * Other Risk Management certifications and accreditations an asset * French, Spanish or Portuguese language an asset FINRA Registrations Required: * Not Applicable BNP Paribas is committed to providing a work environment that fosters diversity, inclusion, and equal employment opportunity without regard to race, color, gender, age, creed, sex, religion, national origin, disability (physical or mental), marital status, citizenship, ancestry, sexual orientation, gender identity and gender expression, or any other legally protected status.

Keywords: BNP Paribas Investment Partners USA Holdings, Inc., New York , Vice President - ICT/Technology Risk Manager, Executive , New York, New York