IT, Cyber & Data Auditor

In a changing world, unprecedented challenges require unmatched talent. Join one of Montreal's Top Employers in 2024. We are a dynamic and growing organization having its main establishment located in downtown Montreal and part of a leading international banking institution fully committed to building a more sustainable future. Note that the position may be in the Canadian Branch of BNP Paribas or in one of its subsidiaries based in Montreal.

The position at a glance

The North America Hub is part of BNP Paribas' global Internal Audit group (Inspection Gnrale) which is staffed by highly qualified individuals who perform high quality risk-based reviews of the Business, providing assurance, and when necessary, advising management to anticipate and understand otherwise unexpected risks and put in place appropriate mitigating controls.

The Internal Audit team helps senior management protect the company's reputation by avoiding financial and reputational damage. Where it is too late to prevent failure, the team investigates the problem, helps management deal with the aftereffects, and establishes guards against re-occurrence. Headquartered in New York, the North America Hub has primary audit responsibility for BNP Paribas' Corporate and Investment Banking activities in the United States. The audit approach follows practices prescribed by the Institute of Internal Auditors (IIA).

In detail

Responsibilities:

• Oversee direct audit coverage responsibility for the Information Technology, Information Security, and Data audit activities performed relative to BNP Paribas Wholesale activities in North America (US and Canada), supported by a team of subject matter auditors.
• Assess the strengths and weaknesses of the BNP Paribas North America Wholesale activities, through audits, risk assessments and continuous monitoring activities as they relate to Information Technology, Information Security, and Data Management controls, ensuring business objectives regulatory expectations are met, and risks are sufficiently mitigated.
• Perform risk-based audits, based on a thorough understanding of the processes and risks associated with both current and emerging technologies, and on a precise assessment of the adequacy and completeness of the GRC, both from a design and effectiveness standpoint.
• Evaluate the adequacy, effectiveness, and efficiency of Bank policies, procedures, and internal controls as they relate to the Information Technology infrastructure and Business Application Systems as per the terms of the Inspection Gnrale Audit charter and guidelines of the Bank.
• Follow audit professional standards and regulatory requirements in the performance of the day-to-day functions of internal auditor.
• Perform audits of Information Technology operating procedures and processing systems, test operating procedures and processing systems through the performance of detailed fieldwork, examine and evaluate results, assess adequacy of controls, communicate results, and direct follow-up efforts.
• Plan each audit prior to the commencement of fieldwork (includes meeting with IT and Bank management, discussing changes/events that have a material impact on the activity, revising/enhancing the examination program and scope as warranted).
• Review work papers with particular focus on documentation and analysis to support findings.
• Prepare draft findings and recommendations and follow up on findings to ensure that the appropriate corrective actions were taken by reviewing and validating supporting evidence.
• Finalize and distribute the draft of audit findings/recommendations to auditees for internal control improvements.
• Lead, develop and motivate a team of auditors, while promoting a culture of independence, conduct, transparency, integrity, performance, satisfaction at the workplace, and diversity and inclusion
• Encourage problem-solving and promote a constructive work environment among both audit and other Bank staff.
• Ensure that team members have the proper expertise and independence to conduct the required audits and investigations, with the highest integrity and conduct standards.
• Use the results from the skillset analysis to promote continuous training and upskilling of the audit staff.
• Maintain the audit universe and timely update the corresponding risk assessments, supported by a dynamic and documented Continuous Risk Monitoring (CRM) practice, including CRM over the portfolio of IT projects.
• Maintain a close relationship with the BNP Paribas NAR audit teams and Group Inspection Gnrale IT audit domain and interact with Bank's regulators for any matter in scope.

The strengths and skills that will help you succeed

• Bachelor's degree in computer science, Cybersecurity, or a related field.
• Minimum 10 years of experience proven expertise in IT/IS audit and industry best practices, in line with large complex banking organizations.
• Extensive experience working for large global financial services organizations, with solid knowledge of CIB business processes, notably GM, and BNP Paribas environment.
• Experience with banking and financial systems (preferably Trading and Settlement systems, Money Transfer systems, Compliance and Surveillance systems, etc.).
• CISA (Certified Information Systems Auditor).
• Strong background auditing infrastructure and applications controls.
• Solid experience in principles and techniques of Information Systems auditing.
• Understanding of management principles and the ability to recognize and evaluate deviations from good business practices.
• Ability to maintain effective relations between auditors and auditees, and effectively communicate audit results to a wider, non-technical audience.
• Strong managerial experience, promoting a culture of independence, conduct, transparency, integrity, performance, satisfaction at the workplace, and diversity and inclusion.
• Ability to demonstrate effective communication with regulators and management, both verbally and in writing.
• Exceptional analytical abilities, strong organization, and teamwork skills.
• Ability to demonstrate business tactical and strategic thinking, as well as innovation and creativity.
• Excellent communication skills (verbal, written, presentation), interpersonal skills, strong facilitation, and interviewing skills.
• Comfort in discussing IT Controls with the bank's management and obtaining agreement on recommendations pertaining to technology / systems under review.
• Strong risk and control awareness, and knowledge of risk assessment methodology.

Preferred Qualifications:

• Five (5) or more years of Information Technology operational experience.
• Five (5) or more years of Global Market operational experience.
• One (1) or more years of Information Security operational experience.
• CISM (Certified Information Systems Manager), and/or CISSP (Certified Information Systems Security Professional).
• Knowledge and experience with Windows and Unix operating systems, middleware, networks, databases, and emerging technologies.
• Given the vast majority of our clients, both internal and external, are based outside of Quebec and Canada, specific language requirements may apply.Bilingualism in French and English is required.

What's in it for you

In addition to competitive compensation, we offer flexible benefits including a family and spouse insurance program, a defined contribution pension plan and paid days for volunteering. Hybrid work arrangements, such as remote working up to 50% and flexible working hours are available for most positions. BNP Paribas provides excellent training and personal development programs, as well as opportunities for career development within the company and internationally.

To find out more about our range of benefits, click here

What you need to know

• We will review candidates as they apply, so don't wait to submit your application;

• BNP Paribas is committed to accessibility and inclusion. If you need any accommodation during the recruitment process, you can contact accessibility [at] us.bnpparibas (dot) com

• You must be legally eligible to work in the Greater Montreal area and, if applicable, hold a valid work or study permit. Physical presence in BNP Paribas' office(s) is an essential function of this position;

Diversity, Equity and Inclusion (DE&I) at the heart of our commitments

At BNP Paribas all employees are on an equal footing allowing us to create a work environment that values and respects people for their talents, skills and competences.

BNP Paribas recruits, employs, trains, compensates and promotes regardless of race, religion, colour, national origin, sex, disability, age, and other protected status (Employment Equity Act and Canadian Human Right Act).

To learn more about our DE&I commitments, click here

About us

BNPParibas is the top bank in the European Union and a major international banking establishment. Present in 63 countries, with more than 180,000 employees, the bank holds key positions in several areas of banking and financial services.

BNP Paribas' mission is to contribute to a responsible and sustainable economy by financing and advising its clients according to the highest ethical standards, while striving to respond to essential concerns in terms of the environment, regional development and social inclusion.

Since 1961, BNP Paribas has supported large Canadian companies and institutions in their business development by offering a full range of specialized financial services and investment products.

With over 1,400 employees, BNP Paribas in Canada continues to attract experts from diverse fields as well as ambitious young talent from around the world. We are proud to offer our employees a rewarding and international workplace where they can build their professional careers by honing their skills, meeting challenges and enriching their knowledge of the financial industry.

Our certifications and partnerships

• Montreal's Top Employers 2024
• Canada's Best Diversity Employers 2024
• Women in Governance Parity certified - Platinum certification
• Pride at Work Canada
• Rainbow Accreditation issued by Canada's LGBT+ Chamber of Commerce (CGLCC)
• Part of Les Affaires top 300 companies in Quebec
• Synclusiv
• Ready, Willing and Able
• Autisme sans Limites
• LinkedIn Top Companies 2024

Do you want to discover other BNP Paribas offers in Canada?

Click here: BNP Paribas in Canada Our job offers

** Only selected applications that meet the requirements of the role will be contacted **