AM - RISK ORM – Anti-fraud

Job Title: Assistant Manager (AM) - RISK ORM - Anti-fraud (Rogue Trading specialisation)
Department: RISK ORM – Cyber, Tech risk, Fraud and Resilience (CTFR)
About Business Line/Function
RISK Operational Risk Management (RISK ORM) belongs to the second line of defence control function at BNP Paribas. It belongs to the Risk Function (RISK) of BNP Paribas and is placed under the responsibility of the Chief Operational Risk Officer (CORO), who reports to the CRO of BNP Paribas.
The department has responsibility for independently challenging and supervising the Operational Risk management of the whole Group including for the main business domains (also called Poles or Operating divisions) of CIB, CPBS and IPS. Additionally, there is responsibility to cover the Assets Liability Management and Treasury (ALM-T) operations too. This is achieved through: framing operational risk methodology and disseminating of risk management culture across the Group; assessing the adequacy of the operational risk management set-up; controlling effectiveness of Group’s control environment; contributing to the detection, anticipation and response to risks; alerting business and RISK stakeholders on any significant risk issue; providing a consolidated view on Group’s operational risks profile.
As the second line of defence for Fraud risk management (interchangeably called Anti-Fraud), RISK ORM has the responsibility for oversight and supervision on Fraud risks, ensuring and opining that appropriate Fraud risk management efforts are underway and raise any alerts in case of issues to the stability of the Bank and influencing business, functions and technology partners to take sound risk management decisions.
Position Purpose
The Fraud risks including, but not limited to, External fraud and Internal Fraud, data leakage prevention due to fraud, fraud through suppliers, frauds where customers are a victim are key avenues for losses, reputational impact and systemic operational risk for financial services. This role exists to coordinate the supervision and oversight of these Fraud Risks Management activities globally and establish uniform practices across the function by cascading the guidelines and framework developed at Group level. Rogue Trading (RT) risks as a key fraud risk category and under the Designated Market Activities (DMA) risks is a critical risk area within the Internal Fraud risks.
This role exists to contribute to the management of all fraud risks, with focus on Rogue Trading risks under the RT DMA team lead, especially by executing the Level 2 Controls and other supervision and oversight activities on these risks globally.
Scope: All of Group’s business activities that are exposed to fraud risks with specific focus on activities that are exposed to Rogue Trading risks globally.
Responsibilities
The RISK ORM – AF Analyst is a risk professional who assists in coordinating the execution of Level 2 Controls and general supervision and oversight activities across the Group, under the guidance and leadership the AF Manager (RT).
The Role Requires
Knowledge of Operational Risk framework and governance at Group (HI, PI, RCSAs, Recommendations and Action Plans, Level 2 controls)
Understanding of the risks and the business activities / processes in Banking sector
Knowledge of RISK ORM and BNPP organisation
Coordination and leadership skills to influence, inform and consult with fraud experts and fraud risk managers for global teams in three different regions (APAC, EMEA and Americas)
Understanding of the system of information (applications, services,) that are relevant for Rogue Trading risks
The general responsibility of the role includes -
Level 2 Rogue Trading Controls Execution & Monitoring
Perform LoD2 controls planning, execution, and monitoring (e.g., controls plan definition, results analysis).
Execute and monitor DMA Level 2 Controls as part of the annual program, including:
Inventory management of L2C procedures (quarterly consolidation).
Follow up on DMA quarterly controls inventory consolidation by 1LoD on GCLs issued by RISK (RT, TACNAC).
Read-across analysis of L2C results and challenge transposed procedures.
Contribute to the Rogue Trading Committee’s preparation by reviewing control’s applicability, monitoring RT events, analysing controls performed by 2LoD.
Misconduct & Events Without Impacts To The Bank (EWIBs)
Investigate and escalate incidents of misconduct (e.g., fraud,..).
Contribute to misconduct escalation processes and group read-across following RT incidents.
Monitor EWIB incidents and related controls.
Rogue Trading Risk & Control Self-Assessments (RCSAs)
Analyse Rogue Trading RCSA results and monitor linked action plans (e.g., R-4).
Perform yearly read-across analysis to identify control gaps.
Operational Risk Framework:
Support check-and-challenge of RT RCSAs using L2C results.
Ensure alignment with BNPP’s Operational Risk Framework (HI, PI, RCSAs, recommendations).
Global DMA Governance And Reporting
Provide global DMA governance coordination, including:
Quarterly reporting on L2C execution status.
Monitor KPIs for RT Committee (e.g., training completion rates, control effectiveness)
Training
Maintain/update training material on Rogue Trading and follow up the assignation campaigns.
Monitoring of mandatory training completion (identify DMA staff, track KPIs for RT Committee reporting).
Collaboration & Process Improvement
Work with 1LoD control owners (GM, 2S, ALMT, CPBS OROs) to execute L2Cs.
Support central teams on RT-related tasks (e.g., on behalf of local OROs).
Innovation & Automation
Propose innovative solutions to industrialize/automate L2C executions.
Contribute to fraud risk communities (sharing best practices with global teams).
Skills And Experience Required
Successful candidate will have exposure to operating in risk management programs in global organizations, with robust knowledge of technology, risks, architecture and related tools. Prior fraud risk management, compliance or fraud prevention experience and exposure to the Financial Services industry is a must. Experience with Rogue Trading risk management and systems is preferred.
Specific Requirements
Suitable experience (7+ preferred) in any of the disciplines – Fraud risk management, fraud examinations, IT risk management or IT continuity.
Bachelor’s degree in information technology, Information Security, Business or Risk Management (or equivalent professional qualification).
Ability to independently investigate complex cases including cyber security incidents, intellectual property theft, fraud and abuse, asset misuse, and violations of corporate policy.
Team player – focus on the success of the whole team. Working well both with others, as well as individually.
Excellent stakeholder management skills.
Experience in a 2LoD, Risk function, operations or an Internal Audit role.
Good listening and analytical skills – being able to come to a thoughtful and business focused conclusion quickly.
Ability to see the customer perspective, i.e. from a business point of view, the most secure solution is not always workable or realistic considering costs and benefits.
Demonstrating a calm professional approach, with a good understanding of delivery within time constraints and the need to escalate/inform departmental management as appropriate.
Adapting personal approach to suit situations, individuals, groups and cultures.
Taking accountability for their actions and be open and honest when things have gone wrong and celebrating successes when things have gone well.
Being rigorous and thorough – especially when logging and tracking issues through to conclusion.
Ability to manage their workload as to meet the realistic targets and priorities set in conjunction with management.
Demonstrating a high-level of commitment and self-motivation, combined with enthusiasm and a genuine interest in the role of Risk Assessment in business.
Ability to express views clearly and fluently, both orally and in writing. Considers the audience, avoiding technical jargon wherever necessary and appropriate.
Competencies
Good knowledge of Internal and external fraud risk management, cyber security, IT concepts.
Understanding of the banking industry's regulatory requirements on Fraud and ICT (e.g. Article 325 of the Treaty on the Functioning of the European Union, EBA Guidelines on ICT and security risk management etc.)
Ability to articulate risk management concepts in business language
Excellent written and verbal communication skills
Proficient with Microsoft Office Suite
Prior experience documenting tool requirements to support risk management
Ability to travel to vendor sites and perform assessments as necessary
Proven ability to manage issues through to resolution; skilled at making judgment calls.
Ability to successfully multitask and complete difficult assignments within deadlines which may have short lead times
Industry c

Work arrangement
No