At a Glance
- Tasks: Lead cybersecurity initiatives and protect vital information assets.
- Company: Join BNP Paribas Personal Finance, a global leader in consumer finance.
- Benefits: Enjoy a competitive salary, flexible benefits, and a supportive work culture.
- Other info: Flexible hybrid working model and excellent career development opportunities.
- Why this job: Make a real impact in cybersecurity while working with top professionals.
- Qualifications: Extensive IT security knowledge and strong leadership skills required.
The predicted salary is between 43200 - 72000 £ per year.
Location: Solihull; a flexible hybrid working model which supports you as well as enabling you to work collaboratively with your colleagues
Contract: Full-time, Permanent
About Us
At BNP Paribas Personal Finance, we are proud to be part of a global banking group. Our mission is simple: to provide straightforward consumer finance solutions that empower customers to make responsible financial decisions. We partner with some of the UK’s most well-known retailers and brands to help their customers finance purchases in a responsible way.
The Role
The Chief Information Security Officer serves as the process owner of all assurance activities related to the availability, integrity and confidentiality of customer, business partner, employee and business information in compliance with the BNPP PF UK information security policies. A key element of the CISO’s role is working with executive management to determine acceptable levels of risk for the BNPP PF UK. This position is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. The CISO has the responsibility of the management of the IT budget within their department, focused around driving down costs through internal efficiencies and negotiations with external parties where possible.
Key Responsibilities
- Implement and lead a cybersecurity governance that aligns with the Entity's strategic priorities and the Group's IT governance, which sets operational objectives for Cybersecurity and arbitrate, and finally ensures the adhesion and mandate of the Entity's key stakeholders.
- Conduct Entity-wide cybersecurity projects and provide expertise to the Entity's IT teams and projects.
- Implementing project to improve and strengthen the entity's level of cybersecurity, in accordance with the Group's objectives and regulators’ requirements.
- Coordinating action in the event of cybersecurity incidents and crises and ensuring that the entity’s essential services are restored.
- Leading and supervising the security of customer data and the entity's data and IT assets.
- Working with the entity’s IT teams (developers, administrators, users, etc.) and on IT production in increase the security of customer data and the entity's data and IT assets at both the technical and organisational level.
- Creating the necessary internal networks between the IT security teams, the heads of business lines, the control functions (Compliance, RISK, Internal Audit) and HR management teams to ensure the necessary alignment.
- Liaising with external organisations, such as law enforcement authorities and other consultative organisations, as required, to ensure that the entity maintains a strong security posture and that its knowledge of the threats identified by these organisations is up to date.
Skills & Attributes
- Extensive knowledge of IT Security and Cyber Security, Risk anticipation and Risk Monitoring.
- Ability to influence at Board / Executive level.
- Able to lead from the front, inspiring others and generating commitment across cross functional teams.
- Knowledge of commercials within a business, well versed in negotiating / managing budgets.
- Experience in working in a highly regulated environment is desirable.
Could this be you?
Making a positive impact is at the heart of everything we do. We’re looking for people who live by our values, who are positive, brave, and own it. Don’t let confidence hold you back. You don’t need to meet every requirement - if you have around 75% of the skills and the right attitude, we’d love to hear from you.
What’s in it for you
As a Top Employer UK, we offer a supportive, inclusive environment and a flexible benefits package that you can tailor to your lifestyle. Highlights include:
- Competitive salary and comprehensive package, contributory pension, and health cash plan.
- Opportunity to buy/sell holiday giving you even more control over your work-life balance.
- Flexible benefits including private medical insurance and lifestyle discounts.
- A culture that values collaboration, development, and wellbeing.
Apply now to join a team that makes a real impact. Learn more about careers with us: https://www.bnpparibas-pf.co.uk/careers
Your Application Journey
- Call with our Talent Acquisition team.
- Informal chat with the Hiring Manager.
- Competency-based interview including a short presentation (90 minutes).
- 3rd stage informal chat with CIO.
We aim to complete the process within 3-4 weeks, depending on availability. If you’re not shortlisted, we’ll still let you know the outcome. Please note that this role may close early once we have enough suitable applicants, so apply soon. We’re committed to creating an inclusive workplace and ensuring equal opportunities for all, regardless of age, disability, gender, identity, race, religion, sexual orientation, or background.
Deputy Chief Information Security Officer employer: BNP Paribas Personal Finance
At BNP Paribas Personal Finance, we pride ourselves on being a Top Employer in the UK, offering a supportive and inclusive work environment that champions collaboration and employee wellbeing. Our flexible hybrid working model allows you to balance your professional and personal life while benefiting from a competitive salary, comprehensive benefits package, and ample opportunities for growth and development within a global banking group. Join us in making a meaningful impact as we empower customers to make responsible financial decisions.
Contact Details:
BNP Paribas Personal Finance Recruitment Team
StudySmarter Expert Advice🤫
We think this is how you could land Deputy Chief Information Security Officer
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including BNP Paribas Personal Finance, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through BNP Paribas Personal Finance
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at BNP Paribas Personal Finance. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Deputy Chief Information Security Officer
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at BNP Paribas Personal Finance insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to BNP Paribas Personal Finance that you’re committed to staying ahead in the game.
How to prepare for a job interview at BNP Paribas Personal Finance
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at BNP Paribas Personal Finance to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at BNP Paribas Personal Finance.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.