Job description

CIB Madrid IT Platform

Domain: Production Security Team: Extended Rights

Reporting to: Extended Rights Manager Location: Madrid

I. Business Overview

The BNP Paribas Group is one of the largest international banking networks, with a presence in 72 countries.
The organisation is an international financial services group, with in excess of 202,000 employees with solid
roots in Europe, a significant and growing presence in the Americas as well as a solid and fast-growing business
in Asia- Pacific.

The BNP Paribas Group is organised around two main activities: Retail Banking & Services and Corporate &
Institutional Banking (CIB).

MADRID IT Platform

The CIB IT Platform for EMEA is responsible to provide IT Services to our Clients ensuring a Digital Market
evolution, in a secured and performant environment, and with a reliable quality. This function includes Global
Markets Application Production, Local Territory IT Development, the Core Infrastructure environment including
Datacentres, Application Production, Security, Architecture as well as elements of the Global Services
organisation.

II. Context and Role summary

The “Production Security” Domain is part of the Corporate & Institutional Banking Information Technology &
Operations (CIB ITO) of BNP Paribas. Within this domain, “Extended Rights” has a relevant role …

IT Security Operations is part of the IT Risk function to ensure the availability, integrity, confidentiality and
audit of the data. This encompass the responsibility of the level of the infrastructure by making sure security
principles are applied on the network and on the users extended right with a monitoring and control setup in
place

III. Position – Tasks & Key Responsibilities

The jobholder will be mainly in charge of maintaining and improving the level of the infrastructure with the
management of the user extended right and the security tools. Dedicated workflows and change controls are
in place for the audit and traceability purposes

CIB Madrid IT Platform – Job Description 1

His main tasks are but not limited to :

 Administration of users requests for high privilege access such as admin right, remote access to desktop,
browsing to non-authorized websites
 Administration of Security tools such as CyberArk
 Administration of authentication services such as card mgmt. system
 Support for IT production teams on security best practices
 Alignment of security processes with other territories
 Strengthening the control Security environment by completing controls ad responding to audit.
 Script expert to upload information and reconcile with all systems for recertification of users access
 Formalize in writing procedures, processes and policies documents
 Administration of high privilege accounts such as generic accounts, service accounts, admin and functional
accounts

IV. Professional Skills, Abilities and Experience

Essential:
The ideal candidate has a security background on the following point

 Skills and working knowledge of Microsoft Windows knowing concept of generic and services accounts
 Skills and working knowledge of Unix : security setting,
 Skills and working knowledge of CyberArk
 Strong skills and working knowledge of Scripting for reporting automation and for automatizing the BAU
 A technical background in IT security is necessary since the position will frequently requires risks analysis
before taking decisions that may impact the security of the Bank
 Experience in Security Best practices
 1 to 3 years’ experience working in IT infrastructure environments.
 Team and collaborative working to develop and deliver appropriate solutions skills.
 Experience of delivering strategic priorities within strict timelines.
 Customer service oriented skills.

Desirable:
 Knowledge of Database concept : Oracle, Ingress, Sql security setting (inc encryption),
 Skills and working knowledge of Encryption : Opentrust, SSO
 Security qualification such as CISM, CISSP
 Knowledge in Autoprovisionning tools such as BMC ControlSA or Sailpoint

V. Personal Attributes
 Eager to learn
 Analytical mind-set
 Ability to work well under pressure, ability to work autonomous and in team environment
 Good interpersonal and communication skills.
 Can do attitude
 Proactive and pragmatic approach with a strong ability to work on own initiative
 Ownership of work and commitment to delivery
 Strong problem solving skills
 Ability to operate with demanding Senior IT Management
 Team oriented
VI. Languages & Qualifications

LANGUAGES
 High English spoken and written fluent (B2/C)
 French spoken and written will be valued

QUALIFICATIONS
 Bachelor in Computer Science or equivalent
 ITIL Foundation certificate will be desirable

VII. Others

 On Site Services: From 8:00 to 20:00 schedule to cover in weekly shifts of 8 working hours/day
 On Call Services: Out of regular schedule, we provide On Call services (out of business hours) to be covered
in weekly shifts by team members.
 Public Holidays: Team members have to cover all public holidays except 1st January and 25th December (4
persons only in shifts)