IT AUDITOR

Overview

GROUP BNP PARIBAS

BNP Paribas Group is the top bank in the European Union and a major international banking establishment. It has close to 185,000 employees in 65 countries. In Spain we are more than 5,100 employees within 13 business lines. CIB BNP Paribas Corporate & Institutional Banking provides large companies, multinationals and financial institutions with various solutions in advisory, financing, transactional banking, capital markets, settlement, clearing and custody of securities, asset and fund management services and solutions for corporate issuers.

It has 620 professionals in Spain with offices in Madrid, Barcelona, Bilbao and Coruna. The entity has a network present in 56 countries.

ABOUT THE JOB

MISSION

The Inspection Generale (IG) is the internal audit function of the group. It carries out audits on all the activities of the Group in France and worldwide, relying either on generalists or specialists auditors, either through central or local teams. The Iberian Peninsula IG Hub is a team of auditors covering BNP Paribas Group entities operating in Spain and in Portugal, countries where BNP Paribas develops both domestic business activities and large outsourced service centers.

The hub intends to develop a practice for auditing IT activities operated in the Iberian Peninsula and from time to time, for supporting other IT audits over the EMEA region. In this respect, the Iberian Peninsula IG Hub looks for an IT Auditor with a strong IT knowledge and experience in order to participate to IT audit assignments. Knowledge in the fields of Cybersecurity and IT Audit will represent an additional advantage.

The IT Auditor will report directly to the Head of IT Assignment and will be functionally part of the worldwide IT Audit Line.

• Participate in the audit team assignments and special reviews (when required by regulators, business lines, or senior management).
• Contribute to the planning and preparation of the assignment (understanding the methodology to be applied, acquiring knowledge of activities, technologies, and relevant figures).
• Develop a thorough understanding of activities within the scope of the assignment, its strategy and governance, and the related risks.
• Evaluate the overall setup and identify the main areas of risk (including a comprehensive assessment of the management actions).
• Execute detailed investigations leveraging strong technical knowledge in IT systems (Databases, Linux/Windows, Cybersecurity/Network security, Virtualization, containerization, Cloud Computing and related risks).
• Leverage programming languages and scripting to perform efficient investigations by automating analysis.
• Understand standard IT solutions used in IT infrastructure and production, Cybersecurity management to analyze configurations and identify potential risks.
• Recommend appropriate actions to management to remediate identified weaknesses.
• Formalize the results of investigations and contribute to assignment deliverables.
• Present conclusions of fieldwork to senior management.
• Review the implementation of IT recommendations and ensure adequacy of responses to address gaps.
• Perform relevant control testing to ensure proper implementation of actions.
• Contribute to periodic risk assessment of IT activities and planning.
• Keep abreast of regulatory developments relevant to IT activities and related functions.
• Assist in elaboration of IT audit planning following a risk-based approach.
• Contributing responsibilities: contribute to improvement of IG practices through updating methodologies.

• Education: Bachelors/Masters in Information Technology, Management Information Systems, Computer Science or related discipline. Professional qualifications/certifications in Audit (e.g., CISA, CISSP, CISM, CCSP) are a plus.
• Experience: Not less than 3 years of experience in external or internal auditing / IT / risk / compliance / internal control / operations in the financial services industry.
• Languages: English (fluent);
  Spanish (sufficient level or must acquire);
  French or Portuguese (optional).

• Technical: IT Audit practices; strong IT background in IT activities (Development and Maintenance, IT Security/Cybersecurity, IT Continuity).
• Transversal & Behavioral: Analytical skills; ability to synthesize and present to non-IT readers; ability to promote constructive teamwork.

Training programs, career plans and internal mobility opportunities, national and international thanks to our presence in different countries.

Diversity and Inclusion Committee that ensures an inclusive work environment. Activities include PRIDE, We Generations and Mix City.

Corporate volunteering program (1 Million Hours 2 Help) allowing employees to volunteer outside working hours.

Flexible compensation plan. Hybrid telecommuting model (50%). 32 vacation days.

Diversity and inclusion commitment: BNP Paribas Group in Spain is an equal opportunity employer and provides equal employment opportunity to all job seekers. We are committed to…