About Business Line/Function
The Group RISK ORM Network Operational Risk Officer is part of the Group RISK Function within BNP Paribas. The department has responsibility for steering and reporting on the Group’s Operational Risk Management framework and status. It is the independent second line of defense on operational risk management activities of the Group, including on Information and Communication Technology risk management activities.
Position Purpose
RISK Operational Risk Management (RISK ORM), created early 2021 to oversee operational risks within the mandate of the RISK function, is organised, under the responsibility of the Group Chief Operational Risk Officer (Group CORO), around 3 Poles: RISK ORM Framework, RISK ORM Technology & Transversal Risks and RISK ORM Network.
Under the authority of the Pole’s Manager, RISK ORM Network is made up of all the Operational Risk Officers (OROs) acting as the second line of defence (LoD2)
within the Group’s operational entities (Poles, Business Lines, Functions, Transversal Activities).
In this context, the Common Outsourcing Controls Execution Platform (COCEP), whose missions are presented below, reports hierarchically to the Head of RISK ORM ECB Sustainable Remediation Program, and locally to the Head of RISK ORM COCEP Platform.
Dedicated To Group Functions And Transversal Activities Perimeter, He/she
- Contributes to review and challenge recent or renewed outsourcing or purchasing arrangements, providing opinion at each phase of the Third-Party Risk Management process, including on ICT risks;
- Contributes to protect the Bank by reviewing Cloud outsourcing projects to verify their compliance with Group ICT and Outsourcing policies and with the Group Cloud blueprint;
- Oversees the completeness and quality of the outsourcing register (360 RiskOp Arrangement module) to guarantee an accurate