Experteer Overview
In this role you will identify and monitor IT and cyber risks across the BNP Paribas Personal Finance SSCs, assess risk probability and impact, and support mitigation efforts. You will contribute to risk assessments, reporting, and governance of third-party ICT risks within an international, multi-country setup. The position blends risk analysis with frameworks like ISO27k, NIST and DORA, in a collaborative, agile environment. You will work closely with cross-functional teams to ensure risk-aware decision making and compliance.

Compensaciones / Beneficios
• Identify potential IT and cyber risks inherent to the activity
• Monitor ICT risks across the organization and SSC services
• Assess risks using probability, IT and business impact; define mitigation measures
• Support IT risk initiatives and ensure risk considerations are addressed
• Contribute to IT u0026 Cyber risk assessments, control exercises, and reviews
• Provide consolidated IT u0026 Cyber risk reporting with indicators




• Govern third-party ICT risks and ensure proper contract clauses and remediation follow-up
• Participate in provider meetings and internal IT risk governance committees
• Apply IT risk and cybersecurity frameworks (ISO27k, NIST, DORA) and use GRC tools (ServiceNow)

Responsabilidades
• Minimum 2 years in IT risk management and cybersecurity activities
• Knowledge of IT risk management for third-party providers
• Knowledge of application security
• Open, team-oriented profile; not purely technical
• Autonomy and time management
• English at least B2 (oral and written)
• French B1 or higher is a plus
• Nice to have advanced computer science studies
• Experience with Agile methodologies (Scrum, Kanban)

Requisitos principales
• Training programs
• Career plans and internal mobility
• Diversity and Inclusion initiatives
• Corporate volunteering (1 Million Hours 2 Help)
• Adaptable compensation plan
• Hybrid telecommuting (50%)

📌 IT Risk Analyst CTM_001162 (Madrid)
🏢 BNP Paribas
📍 Madrid