Job Title: Vice President (VP) - RISK ORM - Anti-fraud (Rogue Trading specialisation)

Department: RISK ORM – Cyber, Tech risk, Fraud and Resilience (CTFR)

About Business Line/Function

RISK Operational Risk Management (RISK ORM) belongs to the second line of defence control function at BNP Paribas. It belongs to the Risk Function (RISK) of BNP Paribas and is placed under the responsibility of the Chief Operational Risk Officer (CORO), who reports to the CRO of BNP Paribas.

The department has responsibility for independently challenging and supervising the Operational Risk management of the whole Group including for the main business domains (also called Poles or Operating divisions) of CIB, CPBS and IPS. Additionally, there is responsibility to cover the Assets Liability Management and Treasury (ALM-T) operations too. This is achieved through: framing operational risk methodology and disseminating of risk management culture across the Group; assessing the adequacy of the operational risk management set-up; controlling effectiveness of Group's control environment; contributing to the detection, anticipation and response to risks; alerting business and RISK stakeholders on any significant risk issue; providing a consolidated view on Group's operational risks profile.

As the second line of defence for Fraud risk management (interchangeably called Anti-Fraud), RISK ORM has the responsibility for oversight and supervision on Fraud risks, ensuring and opining that appropriate Fraud risk management efforts are underway and raise any alerts in case of issues to the stability of the Bank and influencing business, functions and technology partners to take sound risk management decisions.

The Fraud risks including, but not limited to, External fraud and Internal Fraud, data leakage prevention due to fraud, fraud through suppliers, frauds where customers are a victim are key avenues for losses, reputational impact and systemic operational risk for financial services. This role exists to coordinate the supervision and oversight of these Fraud Risks Management activities globally and establish uniform practices across the function by cascading the guidelines and framework developed at Group level. Rogue Trading (RT) risks as a key fraud risk category and under the Designated Market Activities (DMA) risks is a critical risk area within the Internal Fraud risks.

This role exists to contribute to the management of all fraud risks, with focus on Rogue Trading risks under the RT DMA team lead, especially by executing the Level 2 Controls and other supervision and oversight activities on these risks globally.

The RISK ORM – AF Manager is a risk professional in charge of coordinating the oversight and supervision of the fraud risk management activities in the Bank's business activities.

The Role Requires

Knowledge of the Operational Risk framework and governance at Group and pole levels (HI, PI, RCSAs, Recommendations and Action Plans, Level 2 controls)
Understanding of the risks and the business activities / processes across the Group
Knowledge of RISK ORM and BNPP organisation
Leadership and coordination skills to influence, inform and consult with fraud experts and fraud risk managers in RISK ORM and the RISK ORM teams in the poles
Understanding of system of information (applications, services,) that are relevant for Fraud risks
Ability to learn and inform about intelligence on Fraud risks (via external sources / events / seminars / training)
Ability to establish as an expert coordinator or manager for the global team in three different regions (APAC, EMEA and Americas)

The generic responsibility of the role includes -

Leadership and Coordination

Participates and contributes to the risk community at Group level, sharing with other fraud experts in other Metiers / Functions on similar fraud risks.
Cascades internal / external watch and intelligence relevant to the Group's business activities (derived from Group RISK ORM Intelligence or Anti-fraud teams, external seminars, sources, events etc.)
Coordinates the activities through a book of work for the Anti-fraud teams based in the ISPL hub
Shares and coordinates with the RISK ORM Anti-Fraud community worldwide in order to keep a cohesive approach to monitor and assess the fraud risks
Contribute to the coordination with Inspection Generale regarding missions, recommendations, common pain points etc.
Takes into consideration local aspects / constraints in collaboration with 1LOD, business teams and Compliance teams.
Organise and run regular meetings between AF teams and RISK ORM OROs to align the business line expectations and the delivery by AF team on fraud risks
Lead or contribute to the organisation of emergency meeting in case of fraud incidents in collaboration with other control functions, CCCO, IT, Operations and CIB business line teams.

Level 2 Controls (also called independent testing)

Design and develop the annual plan of Level 2 Controls (L2Cs) in their scope in coordination with the onshore Anti-fraud teams and manager
Plans the delivery and delivers the annual controls as designed. In cases of exceptions, follows strict processes to address the exceptions (cancellations/postponement/deactivation)
Completes restitution of results of the L2Cs and any Permanent Control Actions to be raised with the 1LoD and business line teams.
Specifically, keeps a continuous focus on the planning, delivery and restitution of all L2Cs related to Rogue Trading.
Contribute to the Rogue Trading Committee's preparation by reviewing control's applicability, monitoring RT events, analysing controls performed by 2LoD.
Maintain/update training material on Rogue Trading and follow up the assignation campaigns.
Perform/coordinate with Poles read across analysis on Rogue Trading incidents.

Risk management

Interacts on permanent basis with 1LOD (Business & Operations) to develop trust and confidence on his/her own skill.
Communicates and exchanges with Anti-Fraud Global Coordinator within 1LOD teams.
Works in relationship with RISK ORM on relevant Business Line or location where the risk arises to provide expertise when requested, and/or to verify if the risk is controlled.
Ensures that a control library for mitigating/detecting the fraud risk, and applicable procedures is developed or available.
Coordinate the provision of guidance to implement the Anti-fraud Group Control Library and related controls points
Maintains internal and external relationships with :
All correspondents (COO, CCCO, Front Office, Business Management, Middle Office, Back Office, IT Security, DPO)
RISK ORM and Compliance teams
Vendors and IT specialists dedicated to fraud detections
Contributes in definition of the taxonomy of the fraud-Rogue Trading risks.

Innovation & Automation

Propose innovative solutions to industrialize/automate L2C executions.
Contribute to fraud risk communities (sharing best practices with global teams).

Skills And Experience Required

Successful candidate will have exposure to operating in risk management programs in global organizations, with robust knowledge of technology, risks, architecture and related tools. Prior fraud risk management, compliance or fraud prevention experience and exposure to the Financial Services industry is a must. Experience with Rogue Trading risk management and systems is preferred.

Specific Requirements

Suitable experience (7+ preferred) in any of the disciplines – Fraud risk management, fraud examinations, IT risk management or IT continuity.
Bachelor's degree in information technology, Information Security, Business or Risk Management (or equivalent professional qualification).
Ability to independently investigate complex cases including cyber security incidents, intellectual property theft, fraud and abuse, asset misuse, and violations of corporate policy.
Team player – focus on the success of the whole team. Working well both with others, as well as individually.
Excellent stakeholder management skills.
Experience in a 2LoD, Risk function, operations or an Internal Audit role.
Good listening and analytical skills – being able to come to a thoughtful and business focused conclusion quickly.
Ability to see the customer perspective, i.e. from a business point of view, the most secure solution is not always workable or realistic considering costs and benefits.
Demonstrating a calm professional approach, with a good understanding of delivery within time constraints and the need to escalate/inform departmental management as appropriate.
Adapting personal approach to suit situations, individuals, groups and cultures.
Taking accountability for their actions and be open and honest when things have gone wrong and celebrating successes when things have gone well.
Being rigorous and thorough – especially when logging and tracking issues through to conclusion.
Ability to manage their workload as to meet the realistic targets and priorities set in conjunction with management.
Demonstrating a high-level of commitment and self-motivation, combined with enthusiasm and a genuine interest in the role of Risk Assessment in business.
Ability to express views clearly and fluently, both orally and in writing. Considers the audience, avoiding technical jargon wherever necessary and appropriate.

Competencies

Good knowledge of Internal and external fraud risk management, cyber security, IT concepts.
Understanding of the banking industry's regulatory requirements on Fraud and ICT (e.g. Article 325 of the Treaty on the Functioning of the European Union, EBA Guidelines on ICT and security risk management etc.)
Ability to articulate risk management concepts in business language
Excellent written and verbal communication skills
Proficient with Microsoft Office Suite
Prior experience documenting tool requirements to support risk management
Ability to travel to vendor sites and perform assessments as necessary
Proven ability to manage issues through to resolution; skilled at making judgment calls.
Ability to successfully multitask and complete difficult assignments within deadlines which may have short lead times
Industry certifications (e.g. ACFE, CISA, CRISC) or willingness to obtain the same
Works iteratively, delivering quickly and frequently to produce high quality documents and outputs which require little to no rework.
Multilingual capability with English proficiency (+ French or Spanish) is preferred.

Conduct

Be a role model, supporting and fostering a culture of good conduct.
Demonstrate proactivity, transparency and accountability for identifying and managing conduct risks.
Consider the implications of your actions on colleagues, partners and clients before making decisions, and escalate issues to your manager when unsure.

About BNP Paribas Group

BNP Paribas is the European Union's leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group's commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability.

About BNP Paribas India Solutions

Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union's leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.

Commitment to Diversity and Inclusion

At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.

VP - RISK ORM Anti-fraud