Risk Management Analyst

Overview:

Within the clients Cybersecurity and Digital Fraud department the Risk Analyst role in the Cyber Payment area will give you valuable experience in cybersecurity and paymentsboth strategic priorities for the Group. The Cybersecurity and Digital Fraud (CDF) department manages the cyber risks of the clients information systems to protect the Bank and its customers. As a member you will join the CISO Payment team. Your primary mission is to identify and analyze operational risks through control execution for the IT Payment services perimeter and monitor associated remediation actions. You will report to the ITRO leader.

In this role you will collaborate with security development and production teams as well as with IT risk stakeholders such as the IT Risk Manager the IT Continuity & Resilience Officer and the RISK function.

Beyond an understanding of cybersecurity and our organization it will be a plus if you are also familiar with payment activities and the relevant regulations DORA and PCIDSS given the high criticality of the scope.

What will you do

• Define and promote cybersecurity governance for ITGs Payment Services (IT PS).
• Support IT PS in understanding controlling and managing their cyber risks.
• Oversee end-to-end cyber risk supervision across the three cross entity sectors: IT Cash Management Customer Data Services Electronic Payments and Factoring.
• Identify and analyze risks while collaborating to permanent control activities on ICT and non-ICT risks:
• Determine root causes and potential adverse events;
• Plan and conduct operational risk inputs (RCSA results historical incidents control plans) to update the risk landscape;
• Follow remediations by overseeing implementation of corrective actions and verifying effectiveness.
• Report to the CISO/ITRO/ICRO Payment: Issue alerts propose corrective actions and deliver a consolidated risk overview
• Support risk-management exercises: Provide inputs for RCSA audits and other relevant reviews; Support 3rd party management analysis.

What are we looking for

• Knowledge of GRC IT / Service Now tool and the Microsoft Office suite;
• Minimum 3 years experience in risk management;
• Strong analytical skills ability to perform root cause analysis and impact assessment;
• English is mandatory;
• French is mandatory;