IT Inspector / Auditor

BNP Paribas S.A. (Branch in Poland) is part of the BNP Paribas Group with 200 years of experience in banking. The company operates Corporate and Institutional Banking (CIB) services offering financial solutions globally. The Securities Services business line is a multi-asset servicing specialist and a growing operations centre in Poland.

• Master's degree in IT, computer science, mathematics, or related field.
• Minimum 2 years of professional experience in IT audit or IT control.
• Fluency in English at minimum C1 level.
• Basic knowledge of IT management processes including IT governance, application development, production, continuity, cybersecurity, and third-party management.
• Basic knowledge of main IT technology solutions such as DBMS, OS, LAN/WAN/WLAN/SAN.
• Basic knowledge of cybersecurity technical solutions including IAM, firewall, SIEM, and SOAR systems.
• Knowledge of main IT audit, control, and security standards such as COBIT, ITIL, ISO 27000, and MITRE ATT&CK.
• Strong proficiency in Microsoft Office 365 including Word, Excel, PowerPoint, and Outlook.
• Accuracy, reliability, and credibility.
• Strong commitment to business travel abroad (minimum 4-5 weeks, 3 times a year, mostly in Europe).

• Perform audit assignments in the IT/cybersecurity area as part of the 3rd line of defence in BNP Group entities worldwide.
• Identify risks, prepare audit plans, scopes, and methodologies.
• Present audit approach to auditees, conduct audit tests, and formulate findings and recommendations.
• Prepare and verify post-audit documentation including audit reports.
• Conduct annual risk analyses related to IT/cybersecurity in BNP Group audit units.
• Document audit work in IT systems following BNP Group standards and methodology.
• Verify and assess the implementation of post-audit recommendations.
• Conduct analyses of selected incidents, projects, and activities to identify areas for improvement.

By applying, candidates agree to the processing of their personal data by Network eG (Düsseldorf) as data administrator for recruitment purposes, based on legal grounds including consent and legitimate interest. Providing required personal data is mandatory for application processing. Data may be accessed, rectified, deleted, or transferred upon request and complaints can be filed to relevant data protection authority. Data will not be used for profiling or automated decisions and will be kept for a maximum of 1 year after job posting closure unless additional consent is given.