Global Security - Police and Normative Framework Coordinator

Global Security - Police and normative framework Coordinator

Context The BNP Paribas Fortis Global Security department supports IT and Business Units to develop adequate solutions in the following four areas:

- Information Security
- Business Continuity Management
- Data Protection & Privacy
- Physical Security

The mission of GS is:

- to enable sound and formal security and continuity risk decision making by BNPPF management, and
- to help management with implementing a proper Information Security Management System' (ISMS).

The implementation of a suitable ISMS requires to define, an integrated normative and control framework, based on authoritative sources (eg: directives, laws, ), via policies and standards. The effective operational implementation of these policies and standards must be ensured through a compliance monitoring that measures the degree of conformity and effectiveness. The final objective being to provide reasonable assurance on the achievement and realization of important security and continuity risk control objectives.

Bank's Information Security Normative Framework mission is:

- to define
- Attribute implementation responsibility;
- Get implementers' acceptance on the attributed implementation responsibilities;

Perform Legal & Regulatory Watch

- Ensure that all GS related authoritative sources are captured
- Perform gap analysis to ensure that missing elements are integrated when
- Certifications in ISO27k Information Systems Security Professional CISSP, CISA;
- 2-5 years' experience in developing and maintaining policies and/or processes (preferably in IT area.
- Experienced with regulatory requirements, ISO/IEC standards (eg: 27001 Information Security Management Standard, )
- Tools: advanced knowledge and use of Office suite, relevant, Group tools, SharePoint, Coordination of/collaboration with externals resources
- Working experience with colleagues of BNPP Group ( Paris )
- Project Management/coordination skills (Ability to run projects averaging 100-150 days mostly intra-team).

Business Experience - 2-5 years' experience in IT, Information Security environments
- Capability to quickly understand end-to-end process flows and control needs.
- Experience in creating memos to the attention of senior management level.

Preferable - Preference will be given to candidate that have a good knowledge/practical experience of different bank entities/processes if possible
- Strong and proven Communication, Listening and Convincing skills with a customer oriented mind-set.
- Ability to work in a dynamic and multi-cultural environment with a strong team spirit; Quick self-starter, pro-active attitude
- Accuracy and clarity in writing skills
- Flexible and open to change and innovation
- Good analytical and synthesis skills
- Autonomy, commitment and perseverance
- Ability to manage time and priorities efficiently and to work under stress;
- Results oriented;