Control and Governance Officer IDRAS BNP Paribas Personal Finance

CONTROL AND GOVERNANCE OFFICER

Who are we?

Solid reputation, passionate individuals, and endless opportunities. That’s SE.T – the BNP Paribas Personal Finance South Europe Technologies SSC.

Our consistent track record of services delivery means comfort for our customers and opportunities for our employees.

You will find SE.T to be full of energy and an Inclusive Workplace in which you truly can make a difference.

We are the IT, Data, and Operations Shared Service Center of BNP Paribas Personal Finance. We deliver solutions to entities worldwide, including Cetelem, specializing in financial partnerships with major retailers, consumer goods companies, and car dealerships.

Our services include:

• Applications Management
•  IT Risks & Cybersecurity
• Platforms Management
• Data Analytics & AI
• Operations

We are based in Spain (Madrid) and Portugal (Lisbon, Porto), with 240+ employees skilled in various technologies and operational roles.

About the job 
We are currently seeking a Control and Governance Officer to coordinate the 1st Line of Defense of the Permanent Control framework within South Europe Technologies, ensuring operational risks are covered by a robust and sustainable control framework.

Mission
The Control and Governance Officer supervises and monitors the LOD1 permanent control framework, including fraud management, recommending improvements where necessary. The role involves supporting local business functions, ensuring risks are identified, assessed, and mitigated through updated RCSA frameworks, and ensuring local governance fosters a culture of risk awareness. The officer escalates alerts to the CEO/COO and ensures fraud risks are properly addressed.

Responsibilities
Identification & Self-Assessment of Operational Risks and Controls (RCSA):

• Ensure risks, processes, and controls are identified and updated
• Synthesize risk assessments and control results for validation by management
• Monitor remediation plans and ensure consistent RCSA updates

Management of Operational Risk Incidents:

• Ensure incidents are reported, escalated, and analyzed to define corrective measures 
• Maintain and update records of incidents in the Group database, including fraud cases 
• Follow-up on significant incidents and remediation actions

Management of Potential Incidents:

• Coordinate risk assessments and ensure consistency with the entity’s risk appetite  
• Ensure action plans address potential incidents and promote risk awareness

Procedures

• Ensure procedures are aligned with the Group’s guidelines and updated as needed according to the evolution of SET situation
• Define fraud alert management frameworks and collaborate with relevant teams
• Store and communicate procedures to stakeholders

Action Plans & Recommendations:

Governance & OR Committees participation:

• Define IT governance and risk management principles and support their deployment  
• Organize IT governance committees and coordinate activities related to IT governance
• Coordinate TAC/NAC validation processes for exceptional transactions, new products/activities/processes
• Participate actively in committees on Operational Risks and Permanent Control, preparing agendas, presentations, and follow-up actions
• Contribute to periodic and ad-hoc operational risk reporting

Controls & Control Plans:

• Regularly update control plans based on risk assessments and oversee their execution
• Ensure management reviews control results and defines appropriate remediation actions
• Monitor and track the implementation of control results and action plans

Awareness, Training & Advisory:

• Ensure employees are trained on operational risks and permanent control frameworks
• Act as a relay for risk awareness initiatives and implement fraud risk training programs

Skills

Behavioral

• Organization and autonomy
• Adaptation
• Critical thinking and proactivity
• Communication skills
• Resilience
• Collaboration and teamwork

Transversal Skills:

• Analytical thinking, networking, project management

Core Business Competencies:

• Expertise in operational risk management, internal audit, compliance, fraud, and data intelligence Proficiency in IH/IP 360 for incident registration and risk assessment tools
• Strong knowledge of Excel and PowerPoint

Language Proficiency:

• Fluent in English
• Other European languages are a plus

Our Culture

We develop business solutions for BNP Paribas Group entities, maintaining a high level of service and providing added value to our clients. Our inclusive, multicultural environment fosters career development through training, internal mobility, and flexible work schedules. We embrace hybrid working and offer a range of benefits.

Benefits

• Career development, training programs, and internal mobility
• Diversity and inclusion initiatives, including employee communities like PRIDE and MixCity
• Corporate volunteering programs and flexible compensation
• 31 vacation days and a hybrid work model

Diversity & Inclusion Commitment

We are committed to equal opportunity employment and fostering diversity to increase performance and productivity. We strive to reflect society and uphold BNP Paribas Group’s values.