• The Data Protection Risk Advisor will act as a trusted advisor for Group BNP Paribas Business and Functions and oversight BNP Paribas Data Protection Officers (DPOs), to assist in the implementation, management and monitoring of the Data Protection and Privacy (DPP) strategy, by supporting the definition, implementation, and operationalisation of the Group’s DPP framework by Group Entities

• Independent review and challenge of the technical and operational DPP controls implemented and issue recommendations with regards to privacy, data protection, and compliance with the Group BNP Paribas DPP framework and regulation, for example General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Personal Data Protection Act (PDPA), among others
• Act as a trusted advisor of key internal stakeholders, for example Chief Data Officers (CDOs), Chief Information Security Officers (CISOs), DPOs, Business…) regarding manage DPP requirements, such as
• Oversight and check and challenge complex and transversal DPP initiatives, design and rollout of the DPP strategy, and strategy implementation
• Oversight and check and challenge transversal and complex Group wide Data Processing/Initiative Impact Assessments (DPIA), notable the adequacy of controls and measures, controllership, transfers, among others
• Identify key DPP risks, inform BNP Paribas’ Management and key stakeholders such IT and Business among other, and oversight the decisions to manage those risks
• Oversight key Group data breaches and other DPP incidents and work with key stakeholders (such CDO, CISO, DPO, IT, Legal, among others) on the risk identification, ensure the consistency of potential incidents qualification, conduct post mortem analysis, and validate the adequacy and solutions implementation
• Advising on the maintenance of the Group’s DPP Governance and framework, as well as the definition and creation of DPP policies, guidelines and procedures of Group BNP Paribas
• Monitor and advice on the interactions with authorities and other external stakeholders, analysing the requests, actions to be taken, and producing lessons learned among the BNP Paribas worldwide DPP community
• Monitor global regulatory changes and authority decisions, share and provide advice on DPP risk anticipation to the DPP community, providing lessons learned, best practices and guidelines, and leveraging on the BNP Paribas DPP knowledge basis
• Promote data protection awareness and privacy by design culture across the Group (for example governance, principles of data processing, data subjects’ rights, data protection by design and by default, records of processing activities, security, data breach, authority interactions), and influencing/advising the Group Learn and Development agenda/plans
• Attend regular/ongoing data protection, information security, privacy training, and continuous improvement
• Contribute to committees and strategic meetings providing relevant advice and sharing knowledge and insight related to DPP trends, requirements and context

• Bachelor Degree in Information Technology and Computer Science / Law or related
• At least 3 years of experience in Risk and Controls / Legal / Project Management and Consulting or similar
• Advanced level of English, both written and oral
• Advanced level of French is preferential
• Professional certifications (for example CIPP/E, CIPT, CIPM, ISO27001, among others) in fields relevant to DPP and cybersecurity
• Knowledge of information security controls and principles that ensure confidentiality, integrity, availability of sensitive information
• Knowledge of large-scale technology infrastructure and programmes where large quantities of data are used/managed
• Understanding of cross over requirements (risk, IT, regulatory, data security)
• Ability to evaluate DPP policies, regulations and decisions, and produce actionable insight
• Familiarity with privacy and security risk assessment, best practices and gap analysis, privacy certifications/seals, information security and DPP certifications, and tools

• Attention to detail / rigour
• Adaptability 
• Ability to work in a multi-cultural, multi-lingual environment adapting ways of working as required
• Communication skills, both written and oral
• Client focused

• BNPP Group Personal Data Protection framework, defined to respond to applicable privacy regulations throughout BNPP businesses and territories, relies on the accountability of teams within BNPP entities in their processing of Personal Data (customer, employees, UBOs, representatives of corporate, vendors, among others)
• Group Data Protection Office (GDPO) is part of the RISK Department within BNP Paribas, positioned in the 2nd Line of Defence and, integrated within the Iberian Centre of Excellence, the Data Protection Advisor contribute to supervise the compliance with data protection regulations and Group policies and guidelines, oversighting/ensure the control framework, and give the necessary guidance/advice to support 2nd and 1st Line of Defence
• The 1st Line of Defence (Business, IT and CDO), managing the operations, has the responsibility to embed data protection regulations and Group policies and guidelines in the internal organisation, processes and tools/assets (for example IT, Databases, contracts, among others) within its perimeter (for example privacy by design, Privacy Impact Assessment (PIA), security measures, among others)

#LI-Hybrid 

Why joining BNP Paribas? 

BNP Paribas, the European leader in banking and financial services in Europe, operates in 64 countries and has nearly 180,000 employees. The Group is structured around three operating divisions. Its business lines cooperate closely, as part of our integrated model, to meet the needs of all our clients in a coordinated manner:

Our presence in Portugal

In Portugal since 1985, BNP Paribas today has more than 9.700 employees, distributed across the Group's 10 business entities established in the country. Its presence also extends to 11 excellence centers providing value-added services to various countries where the BNP Paribas Group also operates.

Diversity and Inclusion Commitment

BNP Paribas´ ambition is to cultivate an open and responsive environment for all that encourages collaboration and interaction. We demonstrate our commitment by actively contributing to the Group’s Diversity and Inclusion strategy and goals, in line with the United Nations Sustainable Development Goals. As part of our local Corporate and Social Responsibility - Diversity & Inclusion strategy, BNP Paribas Portugal is committed to:

To foster the effort of BNP Paribas Portugal, multiple initiatives and events take place throughout the year where our people can find out more on the importance of diversity inclusion at the workplace and in our society.

Remote Working Conditions

At BNP Paribas, we embrace a Smart Working framework based on trust, autonomy and collaboration. Within this framework, eligible employees can benefit from flexible remote working options adapted to our hybrid working environment. To ensure a comfortable and efficient working setup, eligible employees are provided with both office and home equipment, are entitled to an equipment allowance and can benefit from exclusive partnerships to purchase additional items at reduced prices. 

Commitment towards work/life balance

Supporting employees in a hybrid way of working while providing them with the means to maintain a work-life balance is an essential dimension of our Smart Working program. At BNP Paribas, we care about our employees’ wellbeing and promote a culture of good integration between work and personal life. 

To find out more on why you should join BNP Paribas please read our Employee Value Proposition and our Career path page.

* Please note that only applications submitted in English will be considered. 

* In case you are selected for this role, further documentation will be requested to support your hiring process.