Assistant Manager - IT Business Information Security Office (BISO) Engineer

Job description

Job Title: IT Business Information Security Office (BISO) Engineer Department: ITGP - CPBS **About Business line/Function** : BNPP Fortis support APS **Position Purpose** The BNP Paribas Fortis IT department is working in Agile mode, which offers a challenging and motivating environment where teams and employees are empowered to manage their own technical domain **The IT Production Security Department’s Mission Is To** - Transform security into a strategic value-driver (i.e. enable innovation and enhance customers’ trust in our services) - Have security integrated in the early design phase of products and services ('secure by design') - Root security deeply in our corporate DNA - Validate the security of our services and solutions As part of the Agile Impulse organization, the Security Tribe provides best-in-class security capabilities ready to be used by the other tribes. **Responsibilities** As BISO Engineer, you join the enthusiastic and multidisciplinary team Business Information Security Office. They’re responsible for managing the implementation of the IT information security & Risk (IS&R) processes and standards. **To Achieve It, You Directly Contribute To Their Objectives** - Supporting the implementation of the information security & Risk (IS&R) - Supporting the Information Security and Risk Management practices - Coordination of the Information Security & Risk awareness initiatives within IT - Collaboration with the IT squads to ensure alignment with security principles - Build and maintain a good relationship with all IT interested parties in order to Monitor, control and report on the accesses of the IT squads - Report to the IT BISO - Interacts with the IT squads to raise the level of information security & risk to the required level and to monitor security risk related issues that concerned different squads and propose corrective actions - Coordination point to ensure completeness of the application referential for information assets owned by IT - Document procedures and processes - Monitor and report on the status and progress of executed recurrent tasks: - Vulnerability management - Control plan execution - Patch management dashboard - Security configurations - Internal quality control execution - Exception management (logical accesses) **Technical & Behavioral Competencies** - You’re the physical embodiment of the scrum values: involvement, focus, openness, and respect, with a good dose of courage to boot - You’re inquisitive and driven—and you’re always on the ball - You thrive in a team environment, happily sharing your knowledge and insights - You are quick to make connections and dare to question everything that deserves it - You’re able to work under pressure - You always search to improve yourself by learning new technologies, methodologies and/or how to be a better you - You are excited by having responsibilities, making decisions & vulgarizing them - You have a strong interest in Security & Development - You know your way around: - Technology landscape: infrastructure, systems and processes such as Hardware, OS, network, etc. - Stakeholder management - Communication best practices - Process, procedures and how important they are - Business intelligence **Mandatory** - You are proficient speaking and writing English - You have (at least) 4 years of experience preferably in a transversal security role or IT role - You have (at least) 4 years of experience in development: PYTHON, DataFrame (Pandas or Polars), SQL - Alternatively, you have (at least) 4 years of experience with Power Apps from Microsoft. - You have proved experience with continuous improvement and automation **Transversal Skills** - Ability to develop and adapt to a process - Ability to understand, explain and support change - Ability to anticipate business and strategic evolution - Client focused - Analytical ability - Ability to manage a project **Behavioral Skills** - Communication skills - Ability to collaborate/Teamwork, but also work autonomously - Organizational Skills - Client oriented **Education Level:** Bachelor’s degree in IT/Computer Science or equivalent practical experience **About BNP Paribas Group** BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability. **About BNP Paribas India Solutions** Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union’s leading bank with an international reach. With delivery centers