IT Governance Officer

About the role

BNP Paribas Cardif in Turkey offers protection insurance products and private pension products through its TEB and agency network. It is looking for an IT Governance Officer who will carry out IT risk analysis, manage IT risks and oversee IT risk controls within the group.

Key responsibilities

• Perform IT risk analysis to identify and assess risks to IT and applications
• Report to stakeholders on material IT risks and follow up action plans, keeping risk logs updated
• Manage the IT risk acceptance process and monitor non-tolerable risks
• Oversee first-line control activities, analyse control results and register risks in the IT or Group Risk Register
• Organise regular IT Risk Committee meetings and oversee auditor and control recommendations
• Monitor compliance with IT governance rules and review significant incidents, risk maturity and risk mapping
• Promote good IT risk management practices

Required profile

• Knowledge of IT risk management and analysis methods, and of IT organisations and professions
• Experience with internal and external security and governance audits
• Ability to communicate professionally with IT and non-IT audiences and to work in teams
• Understanding of incident handling, security investigation and vulnerability assessment; knowledge of security regulations and data protection frameworks is an asset
• Degree in security and/or certifications such as CRISC, CISSP, CISA, CISM, CEH or OSCP

Required skills

• CIS20, NIST, ISO 27001/22301 and SOC 2 frameworks
• Penetration testing tools, techniques and standards
• Corporate and group IT risk management tools

What we offer

• Online technical training and career development paths
• Private health insurance and flexible working hours with home office
• Wellness workshops and a paid birthday leave
• Onboarding programme with a buddy