Job Title: Transversal Risk Management Lead (Director) Department: Compliance Hub (India CoE) About Business line/Function: Compliance Hub
- India CoE is dedicated to safeguarding the Group's reputation and mitigating risk across its global businesses by supporting a broad range of Compliance functions. The Hub serves as a strategic global partner to Compliance teams worldwide, delivering expertise in Financial Security (KYC, Sanctions, and AML), controls framework, conduct and professional ethics, data analytics and governance, and transformation initiatives including AI adoption. The Hub teams collaborate closely with Compliance and business stakeholders across the Group to drive efficiency, strengthen controls, and enhance operational resilience. Position Purpose: Lead a team responsible for the compliance operational risk management activities, with controls execution, and independent testing (controls assurance) as a core and prominent mandate, alongside Risk and Control Self-Assessment (RCSA), independent risk analysis and oversight of the Compliance operational risk framework. The role is accountable for providing independent challenge and assurance over the design and operating effectiveness of controls, identifying material control weaknesses and ensuring appropriate escalation, remediation and sustainable closure. The position combines operational risk expertise, permanent controls, service delivery, transformation, people leadership, quality oversight and global stakeholder management. The individual will report directly to the head of the Compliance Hub. Responsibilities Direct Responsibilities
• Define and execute the strategy, service catalogue and target operating model for the Operational Risk capability, including permanent controls, within the Compliance Hub.
• Build the Hub as a credible centre of expertise for operational risk, permanent controls and risk governance activities supporting global Compliance stakeholders. Controls Execution and Assurance
• Lead the controls execution and assurance capability within the Compliance Hub, ensuring appropriate independence, methodological consistency and quality of execution.
• Establish and maintain a risk-based controls testing plan aligned with the Compliance risk profile, RCSA outcomes, historical incidents, regulatory findings and other relevant risk indicators.
• Oversee independent testing of the design and operating effectiveness of key controls, including relevant second-level controls.
• Ensure that the testing methodology clearly covers scope definition, sampling, test procedures, evidence requirements, documentation standards, conclusions and issue-rating criteria.
• Provide independent challenge to control and process owners where control design, execution or supporting evidence is considered insufficient.
• Ensure that control deficiencies and testing exceptions are appropriately assessed, documented, rated, escalated and assigned for remediation.
• Oversee root-cause analysis and remediation plans arising from controls testing, including timely follow-up and sustainable closure.
• Ensure appropriate retesting and closure validation before material findings or remediation actions are considered complete.
• Analyse testing results horizontally to identify recurring weaknesses, systemic control issues and emerging risk themes across Compliance activities.
• Provide senior management with consolidated controls reporting covering control effectiveness, significant deficiencies, overdue remediation and areas requiring management attention.
• Maintain complete testing documentation and audit trails to support Internal Audit, Inspection Générale and regulatory review.
• Drive the use of data analytics and automation in controls testing, including population analysis, sample selection, exception detection and continuous control monitoring. Operational Risk and Permanent Controls Framework
• Ensure that Group operational risk regulations, norms, guidelines and methodologies are understood and implemented consistently across the activities within scope.
• Lead or oversee Risk and Control Self-Assessment (RCSA), including risk identification, inherent and residual risk assessment, evaluation of control effectiveness and monitoring of mitigating actions.
• Ensure alignment between risk taxonomy, process and organisational cartographies, local control plans and underlying risk assessments.
• Oversee the identification, analysis, escalation and follow-up of historical incidents, findings, recommendations, Permanent Control Actions and remediation plans.
• Entrench disciplined use of Group Operational Risk Management tools, including 360 RiskOp, and ensure the accuracy, completeness and timeliness of information recorded.
• Provide a consolidated and forward-looking view of material risks,



control weaknesses, overdue remediation and emerging risk trends.
• Produce clear, concise and decision-oriented management reporting based on risk assessments, controls, incidents, independent analysis and action-plan status.
• Ensure material issues are escalated promptly and tracked through to sustainable closure.
• Identify opportunities to consolidate, mutualise, standardise and scale activities while preserving clear risk ownership, independence and accountability.
• Lead transformation initiatives and promote the appropriate use of data analytics, automation and AI to improve risk identification, monitoring, reporting and operational efficiency.
• Act as the senior point of contact within the Compliance Hub for Operational Risk and Permanent Control matters and represent the Hub in relevant global governance forums and transformation programmes. Contributing Responsibilities
• Build strong partnerships with Global Compliance, RISK Operational Risk Management, Compliance Operational Risk Officers, Permanent Control teams and other Lines of Defence.
• Translate global priorities and stakeholder expectations into clear delivery plans, capacity requirements and measurable outcomes for the Hub.
• Provide constructive challenge and expert advice on complex or high-stakes operational risk matters.
• Ensure services meet agreed standards for quality, timeliness, consistency, responsiveness and regulatory relevance.
• Implement appropriate KPIs, KRIs, quality assurance, capacity management and service-review mechanisms.
• Drive industrialisation, process simplification and standardisation of recurring operational risk activities.
• Optimise the organisation through appropriate mutualisation, role clarity and delayering, without weakening controls or segregation of duties.
• Lead, coach and develop Operational Risk and Permanent Control teams, setting explicit objectives and fostering accountability, collaboration and sound risk judgement.
• Define the required skills, staffing model and development pathways and lead recruitment, onboarding, performance management, mobility and succession planning.
• Develop future leaders and reduce key-person dependencies through structured knowledge transfer and cross-training.
• Manage the function capacity and budget in line with strategic priorities and agreed service commitments.
• Promote an inclusive culture of continuous improvement, constructive challenge, integrity and professional excellence. Technical & Behavioral Competencies
• Strong experience in controls execution, and controls assurance, including assessment of control design and operating effectiveness.
• Demonstrated ability to develop and execute risk-based testing programmes and controls assurance methodologies.
• Strong understanding of testing techniques, sampling, evidence assessment, issue classification, root-cause analysis, remediation tracking and closure validation.
• Experience providing effective independent challenge to control and process owners.
• Ability to translate testing results into thematic risk assessments, clear conclusions and senior-management reporting.
• Understanding of the interaction between RCSA, controls testing, incidents, findings and remediation, enabling an integrated view of the control environment.
• Strong expertise in operational risk management, permanent control and governance frameworks within banking or financial services.
• Deep understanding of RCSA, risk taxonomy, process cartography, control design and effectiveness, inherent and residual risk assessment and remediation governance.
• Experience with operational risk incidents, findings, recommendations, Permanent Control Actions, action plans and management reporting.
• Strong understanding of the respective responsibilities and interactions of the first, second and third Lines of Defence.
• Ability to translate complex risk information into clear executive-level conclusions, priorities and decisions.
• Strategic thinking, sound risk judgement and confidence to challenge and escalate appropriately.
• Credibility and influence with senior international stakeholders.
• Strong people leadership, talent development and organisational-design capability.
• Clear and concise oral and written communication, including executive reporting.
• Delivery focus, analytical rigour,



adaptability and disciplined follow-through. Specific Qualifications
• 15+ years of professional experience, including significant experience in Operational Risk, Internal /Permanent Controls, Compliance, Risk Management, Internal Audit, or a related control function within financial services.
• Demonstrated experience leading sizeable teams or a complex capability and managing senior international stakeholders.
• Experience operating in a global banking environment or complex matrix organisation.
• Experience establishing, transforming or scaling an Operational Risk, control or governance capability is strongly preferred.
• Relevant professional qualifications in Risk, Audit, Compliance or Control are advantageous Transversal Skills Skills Referential (Required knowledge, skills and abilities)
•
• Analytical Ability
• Ability to anticipate business / strategic evolution
• Ability to understand, explain and support change
• Ability to manage / facilitate a meeting, seminar, committee, training…
• Ability to develop others & improve their skills
• Governance, management reporting and escalation
• Data analysis and performance measurement
• Transformation, automation and AI governance
• Stakeholder management and influencing
• People and capability leadership Behavioral Skills
•
• Attention to detail / rigor
• Critical thinking
• Ability to synthetize / simplify
• Communication skills
- oral & written
• Strategic thinking
• Constructive challenge and intellectual independence
• Collaboration and teamwork
• Problem solving and results orientation
• Adaptability and resilience Education Level: Bachelor's degree in Business, Risk Management, Finance or a related discipline; Master's degree or MBA preferred.

Location:
Mumbai About BNP Paribas Group BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability. About BNP Paribas India Solutions Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union’s leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions. Commitment to Diversity and Inclusion At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.

📌 Director - Transversal Risk Management Lead (Mumbai)
🏢 BNP Paribas
📍 Mumbai