Job Title: Operational and Permanent Control Analyst/Associate

Department: P&P ISPL ARAP

About Business line/Function: Procurement & Performance

Position Purpose: The OPC Analyst operates the Control framework relating to all operational risks, including Fraud, Third Party, Conduct, Compliance, Regulatory, Information & Communication Technology risks, and others risks types. OPC is responsible for the deployment of internal policies and procedures issued by specialize independent control functions part of Risk teams (2nd Line of Defence), and for the compliance with external regulatory and supervisory requirements.

Responsibilities

Direct Responsibilities

▪ Identify and assess risks and controls (Risk and Control Self-Assessment) by ensuring that key operational units and processes, material risks and risk mitigants are identified.

Perform/drive the risk identification and assessment in liaison with independent control Functions when needed, ensuring validation by the relevant management level and consistency with the defined risk tolerance. Contribute to the definition and follow-up of remediation plan if needed.

▪ Manage Procedures by ensuring that Group procedures requirements are implemented locally, complemented with local specificities (regulations, tools, organizations ...). Ensure that the procedures designed by the businesses and functions are identified, updated, properly stored and communicated to the relevant stakeholders within the Operating Entity. Identify and propose calibration of procedures according to the outcome of the risk assessment and other risk events (HI, control results, external events, Audit missions).

▪ Implement Controls and action plans: by defining and regularly updating the control plans according to the outcome of the risk assessment, regulations, other risk events (Historical Incidents, control results, external events, Audits). Perform and/or coordinate controls according to this control plan. Ensure that control results are reviewed and analysed by the Management and when relevant by operational teams / relevant stakeholders and that remediation action plans are defined if and when needed. Input in Group tools the control results and major action plans. Follow-up the implementation of remediation actions.

▪ Document findings, recommendations and permanent control actions: Upon notification/receipt of reports, organise the follow-up of the findings and recommendations, either issued internally (e.g. IG supervision) or externally (external auditors, supervisors) and ensure that they are closed within due date.

▪ Manage historical incidents by alerting the management and the independent control functions if needed on key incidents. Collect incidents (including impacts measurement), report and update in the incidents database, including suspected and attempted fraud cases. Analyse incidents in a timely manner and define, jointly with the relevant stakeholders, the correctives measures be implemented to mitigate risks. Follow-up and /or initiate the implementation of remediation actions and the unfolding of long term incidents. Perform controls on the incident collection process, in particular the cross-check with other databases (accounting or other when existing) and the half-yearly attestation by the local management.

▪ Provide Management support and governance by active contribution (or organization) to any committee on Operational risks and Permanent Control committees. Alert and escalate to the relevant level of management any operational risk incident and/or any recurring weakness. Perform periodic and ad-hoc reporting to the appropriate level of management as well as to independent control functions. Ensure an appropriate training on Operational risks and Permanent Control framework is provided to employees, notably newcomers. Show ability to take ownership of specific OPC activity streams/topics, and be able to deliver the full and exhaustive actions taken on the assigned process(es) to the management.

▪ The above activities will be focused specifically on Information and Communication Technology namely, the application of the BNP Paribas Group IT governance rules and requirements within the different frameworks involving ICT risks (IT Security, IT Outsourcing, Data Integrity, IT Project Management and Tools developments lifecycles and controls on tools not supervised by the IT department.).

Contributing Responsibilities

Flexible working in EMEA & APAC shifts

Technical & Behavioral Competencies

Transversal Skiis - Ability to develop and adapt a process -Proficient

Specific Qualifications

Risk and Controls ([0 - 2] years)

Compliance ([0 - 2] years)
Project Management and Consulting ([0 - 2] years)

Technical Skills

Skills Referential (Required knowledge, skills and abilities)

MS OFFICE PACK MICROSOFT EXCEL (Proficient)
MS OFFICE PACK MICROSOFT WORD (Proficient)
MS OFFICE PACK MICROSOFT POWERPOINT (Proficient)

Behavioral Skills

Ability to collaborate/Team work - Proficient
Organizational - Proficient
Ability to deliver/result driven – Proficient
Communication Skills – Oral & Written – Proficient
Risk Management -Risk Knowledge & Awareness - Proficient

Education Level

Bachelor's (3-5 years) in Business Management

Bachelor's (3-5 years) in Economics, Finance and Accounting

Location: Mumbai/Chennai

About BNP Paribas Group

BNP Paribas is the European Union's leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group's commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability.

About BNP Paribas India Solutions

Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union's leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.

Commitment to Diversity and Inclusion

At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.

Associate Operational and Permanent Control