BNP Paribas Group is the top bank in the European Union and a major international banking establishment. It has close to 185,000 employees in 65 countries. In Spain we are more than 5,100 employees within 13 business lines.
BNP Paribas Corporate & Institutional Banking provides large companies, multinationals and financial institutions with various solutions in the areas of advisory, financing, transactional banking, capital markets, settlement, clearing and custody of securities, asset and fund management services and solutions for corporate issuers. It has 620 professionals in Spain with offices in Madrid, Barcelona, Bilbao and Coruña. The entity has a network present in 56 countries.
ABOUT THE JOB
The Inspection Générale (IG) is the internal audit function of the group. It carries out audits on all the activities of the Group in France and worldwide, relying either on generalists or specialists auditors, either through central or local teams.
The Iberian Peninsula IG Hub is a team of auditors covering BNP Paribas Group entities operating in Spain and in Portugal, countries where BNP Paribas develops both domestic business activities and large outsourced service centers. The hub intends to develop a practice for auditing IT activities operated in the Iberian Peninsula and from time to time, for supporting other IT audits over the EMEA region.
In this respect, the Iberian Peninsula IG Hub looks for an IT Auditor with a strong IT knowledge and experience in order to participate to IT audit assignments. Knowledge in the fields of Cybersecurity and IT Audit will represent an additional advantage.
The IT Auditor will report directly to the Head of IT Assignment and will be functionally part of the worldwide IT Audit Line.
RESPONSIBILITIES
* Participate in audit team assignments and special reviews, contributing to planning and preparation of the assignment – understanding methodology, gaining deep knowledge of the activities to be covered, understanding detailed technologies, gathering relevant key figures, etc.
* Develop a thorough understanding of the activities within the scope of the assignment, its strategy and governance, and the related risks.
* Evaluate the overall set‑up and identify the main areas of risk, including a comprehensive assessment of management actions.
* Execute detailed investigations leveraging a strong technical knowledge in various IT systems (Databases, Operating systems Linux/Windows, Cybersecurity/Network security, Virtualization, containerization, Cloud Computing and related risks).
* Leverage appropriate programming languages and scripting to perform efficient investigations by automating analysis.
* Ensure adequate learning and understanding of the standard IT solutions used in the infrastructure and production, and of the Cybersecurity management to analyse configurations and identify risks.
* Recommend appropriate actions to management to remediate identified weaknesses.
* Formalise the results of the assignment investigations and contribute to the production of the assignment deliverables.
* Present the conclusions of the assignment fieldwork to senior management.
* Review the implementation of the Inspection Générale IT recommendations – review and challenge remedial actions, ensure adequacy of the answers, and perform relevant control testing to confirm proper implementation.
* Contribute to periodic risk assessment of IT activities and planning – perform a periodic and comprehensive risk assessment per Group guidelines, stay abreast of regulatory changes, assist in the IT audit planning based on a risk‑based approach, and contribute to the improvement of the IG practices through updated methodologies.
REQUIREMENTS
* Possess a Bachelor’s / Master’s Degree in Information Technology / Management Information Systems / Computer Science or related discipline.
* Professional Qualification / Certificate in Audit, e.g. CISA, CISSP, CISM, CCSP is a plus.
* Not less than 3 years of experience in external audit / internal audit / IT / risk / compliance / internal control / operations in the financial services industry.
* Languages: Spanish (sufficient level or to‑be‑acquired); French or Portuguese (if possible).
* Strong technical background in IT activities – notably IT Development and Maintenance, IT Security (especially Cybersecurity) and IT Continuity.
* Analytical skills.
* Ability to synthesise and present information in a way understandable to non‑IT readers.
* Ability to promote a constructive, cooperative teamwork environment.
BENEFITS
* Training programmes, career plans and internal mobility opportunities, national and international thanks to our presence in different countries.
* Diversity and Inclusion Committee that ensures an inclusive work environment; employee communities such as PRIDE, We Generations and MixCity organise diversity and inclusion awareness actions.
* Corporate volunteering programme (1 Million Hours 2 Help) for employees to dedicate time to volunteer activities.
* Hybrid telecommuting model (50 %).
Diversity and Inclusion Commitment
BNP Paribas Group in Spain is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity/paternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency, which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients.
#J-18808-Ljbffr