Team Leader for Penetration Test Coordination Team

BNP Paribas S.A. Branch Poland is part of BNP Paribas Group, a leading international bank in the European Union with 200 years of experience in banking. The Corporate and Institutional Banking (CIB) division provides financial solutions globally. The position is within the EMEA IT Risk and Cybersecurity Office, part of the IT Directorate of BNP Paribas Corporate and Investment Bank (CIB), specifically in the EMEA Ethical Hacking team focused on penetration testing services.

• 5 to 8 years of experience in project management or service delivery roles
• Proven team management experience in worldwide organizations
• Confirmed experience in cybersecurity practices, preferably penetration testing or pentest coordination
• Problem-solving mindset with hands-on experience implementing international processes and procedures
• Ability to manage and facilitate meetings or committees
• Effective collaboration skills with teams located in multiple countries
• Capability to manage services with dependencies across multiple countries
• Excellent written and verbal communication skills in English
• Bachelor degree or equivalent experience in computer science, cybersecurity, or related fields

• Directly lead the pentest coordination team for EMEA to plan and track all pentests for CIB EMEA according to the annual Book of Work
• Collaborate frequently with CIB pentest services in India to ensure delivery, quality, and technical coordination
• Oversee and maintain high-quality reporting tools and ensure compliance of EMEA pentests with internal policies and regulatory requirements
• Support audit reporting (internal and external), track KPIs/KRIs, and controls to provide stakeholder visibility and contribute to audit readiness
• Manage EMEA pentest third-party contracts, consolidation, and consumption, and assist in new contracts to optimize budget use in line with CIB EMEA needs and priorities

By applying, candidates consent to the processing of their personal data by Network eG in compliance with data protection regulations for recruitment purposes. Providing personal data is voluntary but necessary for recruitment consideration. Candidates have rights to access, rectify, delete their data, and file complaints with supervisory authorities. Personal data will be processed for a maximum period of one year after the job posting ends unless separate consent is given for future recruitment.