Cybersecurity & IT Risk Engineer - Security into projects

About the job 

South Europe Technologies (S.ET Iberia) is one of BNP Paribas Personal Finance’s shared services centers, dedicated to delivering outstanding IT solutions to BNP Paribas Personal Finance entities around the world.

• Applications Management (Architecture, Project Management, Development, and Quality Assurance)
• IT Risks & Cybersecurity Services
• Platforms Management
• Data
• Ad-hoc, T&M Development

In this context, we are looking for an IT Risk & Cybersecurity Engineer to join our team. 

Mission 

We are looking for an Cybersecurity and IT Risk engineer to BNP Paribas Personal Finance entities assessing the security of projects and/or applications during the whole project: design, development and release to production.

Your Main Activities Will Include 

·       Have meetings with asset owners and/or project management (business and technical).

·       Assess cybersecurity and IT risks and controls.

·       Propose corrective actions to mitigate risks, either technical or functional.

·       Ensure that security requirements and architecture designs meet BNP Paribas requirements.

·       Evaluate and periodically update security documents and application assessments.

·       Generate KPIs and metrics to report the Stakeholders. 

Skills

·       Advanced student/graduated of a computer science related career.

·       Customer & result oriented (service delivery will be the heart of the activity).

·       Motivated to pick up new skills as you go.

·       Problem solving skills and proactivity.

·       Time management.

·       Structured analyst, capable to embrace and use data analytics to assess risks, scope audits and test controls.

·       Good analytical skills.

·       Ability to communicate and report to different levels in the organization.

·       Autonomy 

·       Team worker, assertivity.

·       Accountability and ownership. 

What We Are Looking For 

• Minimum 2 years of proven working experience in the cybersecurity field
• Basic knowledge of architecture in the application layers (presentation, application, DB), network isolation, network zoning, DMZ, web application controls, security headers, application coding best practices, secure development, etc.
• General knowledge of standards like NIST, ISO27001 and best practices like OWASP.
• General knowledge in risk management, vulnerability management, S-SDLC.
• Capacity to manage several projects in parallel and respect the deadlines.
• Autonomy and time management
• Customer & results-oriented (service delivery will be the heart of the activity).

Language Skills 

• English: C1 Level (oral and written) - mandatory

Benefits 

• Training programs, tailored career paths, and opportunities for internal mobility—nationally and internationally—supported by our global presence
• Diversityand Inclusion Committeeworkingto create an inclusive work environment, with active employee communities organizing awareness activities (PRIDE, We Generations,MixCity, etc.)
• Corporate volunteering program (1MillionHours 2 Help) supporting employees in their community engagement
• Flexible compensation plan
• Hybrid telecommuting model (50%)
• 31 vacation days

Diversity and Inclusion Commitment 

BNP Paribas Group in Spain is an equal opportunity employer, proud to offer equal employment opportunities to all job seekers. We are deeply committed to ensuring that no individual is discriminated against based on age, disability, gender reassignment, marital or civil partnership status, pregnancy and maternity/paternity, race, religion or belief, sex, or sexual orientation. Equity and diversity are at the heart of our recruitment policy, as we believe they foster creativity and efficiency, ultimately improving performance and productivity. We strive to reflect the society in which we live while maintaining the standards our clients expect from us. 

About Our Culture 

We are proud to create, maintain, and develop strategic business applications for BNP Paribas Personal Finance entities worldwide, maintaining high service levels and delivering added value to our customers. In our multicultural environment, we encourage all team members to develop their talents and skills, providing a wide variety of career opportunities and internal mobility programs within local S.ET teams or across other entities in the Group, both in Spain and globally. 

We value the experience of our employees and work to maintain a balanced environment, offering flexibility regarding work schedules and respect for personal time. Our hybrid working model is a testament to our belief that social connection enhances our daily activities. 

Diversity and inclusion are among our core values, and S.ET is an equal opportunity employer. We are committed to ensuring employment opportunities regardless of ethnicity, beliefs, religion, nationality, age, sex, sexual orientation, marital status, or political opinions.