BNP Paribas is an international bank with leading positions in the European market. It is present in 74 countries and employs more than 192,000 people, 146,000 of whom are in Europe. The Group holds key positions in its three main areas of activity: Domestic Markets and International Financial Services (whose retail banking and financial services network is part of Retail Banking & Services), as well as Corporate & Institutional Banking, which offers services to corporate and institutional clients. The Group supports its customers (individuals, entrepreneurs, SMEs, large companies and institutions) to help them carrying out their projects by providing financing, investment, savings and insurance services.
In Europe, the Group has four domestic markets (Belgium, France, Italy and Luxembourg) and BNP Paribas Personal Finance is number one in retail financing in Europe. BNP Paribas is developing its integrated retail banking model in the Mediterranean countries, Turkey, Eastern Europe and has an important network on the US West Coast. In both its Corporate & Institutional Banking and International Financial Services activities, BNP Paribas has leading positions in Europe, a strong presence in the Americas and a solid and growing network in the Asia-Pacific region.
RISK Iberian Hub Madrid is a transversal platform servicing the RISK Function by covering added-value activities around credit risk, market risk, operational risk and data protection. Offering a wide range of services to RISK teams, from consulting to cyber security going through data analysis, modelling or artificial intelligence. The mission of RISK Group Data Protection is to promote the implementation and operationalization of Data Protection policies and procedures with support from business stakeholders.
We aim to provide a catalogue of services to all BNP Paribas platforms. Leveraging the risk management framework, our support will facilitate delivery of Group Data Protection goals. Within RISK Group Data Protection (GDP), the Governance, Framework & Reporting team is responsible for establishing 2LoD Data Protection framework and enablers to support RISK GDP team pillars, ensuring alignment with wider RISK ORM framework and governance, and consolidating reporting to contribute to relevant RISK Committees:
Development of Group RISK Privacy framework and monitor deployment and adoption by local entities.Review and arbitrate exceptions requests raised by local entities.Conduct and coordinate Group Privacy Governance, including Group Privacy & Data Protection Committee.Liaise with RISK teams and contribute to the Group RISK Artificial intelligence framework and participate to the Group RISK AI Governance.Liaison with regulators and IG on privacy and data protection enquiries and requests.Independent review of 1LoD privacy frameworks and templates issued by 1st LoD.Liaise with LEGAL, RISK ORM and ITG to ensure alignment among the several Group Frameworks and regulatory requirements and provide SME advice on privacy matters.Facilitate adoption of RISK ORM framework in the privacy domain, support local teams and develop guidance and tools to perform these activities by DPOs and DPCs.Produce quarterly Data Protection incident management reporting and dashboards - funnel recommendations and opportunities for check/challenge and lessons learned to DP Advisory.Coordinate or contribute to ad-hoc reporting on Data Protection topics for ratings agencies, insurers, and other stakeholders.Interact with other Group teams to provide inputs from RISK to regulators' enquiries and/or consultation about new privacy regulations.Contribute to and support development of ad-hoc reports and Data Protection risk opinions with local business line and territory Data Protection teams.Coordinate responses to industry bodies (CIPL / IAPP, etc.) on behalf of BNPP Group Data Protection.Steer and act as SME to co-define Data Protection Hub strategy deriving from Group Privacy and Data Protection Framework.Act as Data Protection SME as needed in support of content development, white papers and thought leadership produced for Data Protection teams and other stakeholders.MISSION
Lead the development and maintenance of 2nd line of defence privacy framework, perform independent review of 1st Line of defense framework, ensure privacy is articulate within the wider operational risk framework, support governance and supervisory affairs activities.
RESPONSIBILITIES
Key responsibilities include:
Establish Privacy and Personal Data Protection framework for the bank within the three lines of defense model in alignment with the Group Risk Management Framework.Drive effective implementation and communication of Privacy and data protection policies and guidelines.Provide direction, support and oversight with respect to management of privacy and personal data protection risks to the network of DPOs.
#J-18808-Ljbffr