Security Risks Expert

Company Description

Second largest banking group in France, Groupe BPCE is a robust, socially committed cooperative banking group. Drawing on the strength of the roots we have developed in local communities, we serve a total of 30 million clients globally, including 9 million cooperative shareholders who own 100% of the capital of the Banques Populaires and Caisses d’Epargne via their cooperative shares.

At BPCE Equipment Solutions, we are proud to accompany the big and small transformations that shape significant industries. With approximately 1,600 employees and our presence in 14 countries, we are regularly awarded, notably at the Leasing Life Awards as 'SME Champion of the Year' and/or 'European Lessor of the Year'. We are a leader in Europe and the second‑largest player in the world in equipment financing. Backed by the strength of Groupe BPCE and deeply connected to the field, we are proud to create responsible integrated equipment solutions. We are a great place to work, driven by simplicity, agility, and sustainability.

At BPCE Equipment solutions we are 'Financing Ambition & Empowering Progress'.

Job Description

Your missions within the team

You join the Security team of BPCE ES holding, composed of 5 people as a Security Risks Expert .

At BPCE Equipment Solutions, we specialise in financing sales and professional equipment for businesses. We are the leaders in Europe and number 2 in our market, with around 1,600 employees worldwide.

Join us to share our vision: 'We want to be a leading provider of innovative and flexible solutions for equipment financing and management. We are a digital, customer‑centric organisation committed to delivering an excellent experience for suppliers, partners and customers in all countries. We are a pleasant workplace, driven by simplicity, agility and sustainability.'

BPCE Equipment Solutions is present in 24 countries and offers financing solutions to suppliers and equipment, particularly in the technology, transport, aviation, construction, industry, health, public sector and agriculture sectors.

The role

The security risk expert contributes to improving IT and security risk management by leading actions and projects and bringing his expertise to other departments and entities around the world. He/she is responsible for monitoring and controlling the implementation of the IT risk management and security framework defined by the group.

His main responsibilities in IT risk management and security are as follows:

Governance of the business line

• Participate in the assessment and management of security risks.

Support to entities

• Cooperate with entity security correspondents to exchange best practices, security solutions and risk coverage solutions.
• Participation in monitoring committees with the entities to formalise the follow‑up of the deployment of the BPCE ES action plan.
• Security support and expertise to BPCE ES entities.

Security risk management

• Participation in the definition of the level of exposure to threats (technological watch) and risks (concerning IT security) likely to affect the commercial activity of all BU entities.
• Review each year the TRM risk mapping of BPCE ES.
• Manage security controls (TRM, BCM, data protection, SSPP, external fraud) LoD2 in Archer DRIVE and Priscop for all entities of BPCE ES.
• Assist the Global DPO and the Global RCM regarding LoD2 controls.

Security and safety of persons and property

• Manage projects and monitor recurring controls in accordance with the control plan.
• Implement and monitor reporting tools.
• Lead the Safety and security of people and goods sector.
• Lead the committees on a monthly basis.
• Conduct incident analyses.
• Participate in defining control plans.
• Propose corrective measures and monitor their implementation.
• Monitor regulations and information.

The profession of Security Risks Expert is an excellent gateway to develop your skills and promote your internal mobility. You will benefit from continuous training and work in contact with experts in a multicultural environment.

What we offer

• Be part of a successful international team.
• Work closely with the Global Chief Security Officer.
• Take an active role in the new security target business model.
• Get support to build your international career.
• Take advantage of flexible working hours and part‑time telework.
• Benefit from long‑term career opportunities.

Required Skills/Qualifications/Experience

Your assets for success

• You have at least 3 to 5 years of experience in Technology Risk Management.
• You control the risks related to information systems.
• You wish to work in an international and multicultural environment.

Your profile

• Engineering school with 3 to 5 years of experience.

Relational skills

• Being very adaptable in an international context.
• Demonstrate rigor.
• Having an analytical mind.
• Being results‑oriented.
• Demonstrate a spirit of cooperation.

Main technical skills

• Develop expertise in information systems security and application auditing.
• Mastering the risks related to information systems.
• Mastering the regulations related to their impact on risk management.
• Mastering methods and tools for risk analysis and management.
• English proficiency.