Operational Risk Officer (ORO) Latam
Operational Risk Officer (ORO) Latam
Referencia48315536
- Indefinido
- ES-Madrid-Madrid
- RISQUE
GROUP BNP PARIBAS
- Helps to drive change by participating in the implementation of major transformation programmes, in particular when they are linked to a recommendation from the Supervisor or to compliance with a regulatory provision (e.g. project to monitor the execution and results of controls, Third Party Risk Management, operational resilience, Cyber fraud programme, Cyber programme, Data Leakage Protection Programme).
- Ensures that regulations, standards, guidelines and methodologies relating to operational risk are understood and implemented over time within Arval Latam perimeter (e.g. Risk and Control Self Assessment [RCSA], check & challenge incidents, etc.)
- Performs second-level checks.
- Conducts independent analyses.
- Anchors the use of the Group’s operational risk management tools and associated reporting systems
- Implements the operational risk decisions taken by the Head of OROs or CRO of the perimeter concerned, the Head of OROs of the Sector concerned and the Head of RISK ORM Network.
- Ensures that information is fed back and passed on in line with the issues at stake.
- Takes part in crisis management following an operational incident.
Within the framework of associated governance (e.g. Internal Control Committee attended by the CEO of the perimeter concerned, quarterly monitoring committee attended by the CRO of the perimeter concerned), contributes to drawing up an overview of the operational risk profile of the Arval Latam entities concerned, including technological risks, for the attention of the CRO and CEO, the Head of OROs, and the Head of RISK ORM Network
- On the basis of second-level controls and independent analyses carried out by the second line of defence, assesses the robustness of the system put in place by the first line of defence (organisation, procedural corpus, identification of processes and associated risks, robustness of the control framework put in place, management of incidents, permanent control actions, recommendations from the Inspectorate General, handling of exemptions, etc.), which may lead to permanent control actions where appropriate.
- Provides qualitative and quantitative monitoring of historical incidents, including analysis of the most significant incidents and supervision of the associated action plans, concerning the following risks:
– Fraud, including cyber fraud
– Safety of people and property
– Deterioration of assets Outsourcing
– Business continuity
– Technological risks Personal data protection
– Runtime errors
– Monitors the quality of external events that may have an impact on the risk profile of the business area/unit/scope concerned
– Manages the quantitative and qualitative remediation of the Inspectorate General’s recommendations in the area concerned
Contributes to the OR&C Report for the perimeter concerned.
Helps strengthen the second line of defence against technological risks, given the growing role of technology in the Group’s operational processes, and the need to ensure that technological risks, as operational risks, are effectively covered .
Identifying critical third parties and assessing the technological risks associated with their services, as well as the impact of these risks on the business area/unit/perimeter processes.
- Economics / Business Management
- Audit degree
- 3-5 years internal / external audit degree
- Languages:
Native Spanish / Fluent English / Portuguese evaluable
- Technical; Audit experience / Office
- Transversal & Behavioral
Personal Impact / Ability to influence
Critical thinking
Adaptability
-
Training programs, career plans and internal mobility opportunities, national and international thanks to our presence in different countries.
-
Diversity and Inclusion Committee that ensures an inclusive work environment. In recent years, several employee communities have been created to organize diversity and inclusion awareness actions (PRIDE, We Generations and MixCity).
-
Corporate volunteering program (1 Million Hours 2 Help) in which employees can dedicate time out of their working hours to volunteer activities.
-
Flexible compensation plan.
-
Hybrid telecommuting model (50%).
-
22 vacation days.
-
2 personal days.
-
Day off on Christmas.
-
Half-day off on your birthday.
-
Intensive workday every Friday, and in July and August.
-
Flexible working hours.
-
Life insurance.
-
Health insurance.
-
Meal voucher (€156 per month/10 months).
-
Fixed salary + variable bonus + profit sharing.