GROUP BNP PARIBAS

BNP Paribas Group is the top bank in the European Union and a major international banking establishment. It has close to 185,000 employees in 65 countries. In Spain we are more than 5,100 employees within 13 business lines.

Spain IT Production

Spain IT Production organization consists of CIB ITO & ITG IT Platforms and is responsible for providing IT Production services to our Clients in EMEA, ensuring a Digital Market evolution, in a secured and performant environment, and with a reliable quality. IT Production organization includes Infrastructure services, Telecom & Workspace, Production Security and Application Production domains and associated transversal services (CTO Office, Control Tower, PMO and IT Continuity). In Spain, IT Production relies on a Platform with over 400 experts that provide full-stack support services ensuring a secure, stable, standardized, and efficient production.

ABOUT THE JOB

MISSION

Within BNP Paribas Group IT, the filiere Production Security is in charge of answering operationally to the challenges of cybersecurity with an end-to-end vision and consistently across the Bank.

Within the ITG Production CISO team, we are looking for a senior Cyber Security expert with a strong experience in technical architecture and Cybersecurity risk analysis.

RESPONSIBILITIES

The main activities and missions will be:
- Lead Cyber risk analysis of the group´s shared production infrastructure solutions
- Contribute to the definition and evolution of security architecture models and procedures
- Security instructions in infrastructure projects & solutions
- Perform security studies
- Security advisor for IT Production CISO team
- Security assessment of BNPP subsidiaries´ requests to connect to BNPP Group backbone network and/or Active Directory Forest (AD Trust)

REQUIREMENTS
- Studies

Master´s degree or equivalent

Cybersecurity certifications will be appreciated (CISSP, CCSP, ISO27005, ...)
- Experience

At least 10 years´ experience
- Languages

Good level of English (written/spoken) B2 - C1

French speaking will be appreciated
SKILLS
- Technical

o Good knowledge of the various security framework and norms (e.g. NIST, ISO 27005, DORA, CIS benchmark, OWASP) and security models (e.g. Zero Trust).

o Practical experience in Cyber risk analysis

o Master of Cloud architectures, concepts and technologies (Virtualization, Containers, ...)

o Wide knowledge of the various security mechanisms and technologies (DAM, Discovery, DLP, WAF, Micro-segmentation, Cryptography, Gen AI, ...)

o Proactive survey on new threats and attack tactics
- Transversal & Behavioral

o Critical mind, good analytical and synthesis skills

o Rigor, curiosity, autonomy, involvement, availability and taste for teamwork

o Ability to listen and communicate to convince, adapting to interlocutors

o Ability to take a step back and formalize needs, write synthesis documents and report on work

o Animation of transversal working groups

BENEFITS

• Training programs, career plans and internal mobility opportunities, national and international thanks to our presence in different countries.

• Diversity and Inclusion Committee that ensures an inclusive work environment. In recent years, several employee communities have been created to organize diversity and inclusion awareness actions (PRIDE, We Generations and MixCity).

• Corporate volunteering program (1 Million Hours 2 Help) in which employees can dedicate time out of their working hours to volunteer activities.

• Flexible compensation plan.

• Hybrid telecommuting model (50%).

• 31 vacation days.

Diversity and inclusion commitment

BNP Paribas Group in Spain is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity/paternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency, which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients.