Description
My client is a leading industry specialist within the financial market, urgently seeking an Security Officer with French or Dutch and English
My client is working on a new long term migration program, changing all the tools within the company; using new tools and creating new solutions. This project is due to end at the end of 2013.
1. Context of the mission
- The BNP Paribas Fortis (BNPPF) Access Management Shared Service Center serves the purpose of
- managing on a global level how the company deals with the management of user access rights and reduce
- security risks by offering adequate solutions and services for access management within the BNP Paribas
- Group.
The main drivers are:
- Regulatory compliance and security demands for an adequate protection against information security threats (eg fraud; access to confidential data; etc.)
- Need for swifter and more streamlined management of cross-border and cross-entity access requests - Risk Reduction/Security Improvement
- Sharing and stimulating best practices in logical access management within the group
2. Objective of the job
Guarantee the respect of asset information security and ensure correct implementation of the security model.
The Security Officer is mainly in charge of:
- The definition and implementation of the roles & their hierarchy by analysing the various job functions and the tasks of the employees. He/She assigns the permissions (authorizations to information resources) to specific roles in order for users of the organization to be able to perform their operations. He/She performs these tasks taking into account the Need-to-Know/Need-to-Do & Risk principles and ensures adherence with the framework set out for access management.
- The day-to-day activities related to users and user-role assignments in order to meet the evolving needs of the users of the organization. User Management covers the activities that resides from changes, eg when a person joins the organization, moves from one job function to another or leaves the organization. He/She operates under the policies & guidelines set out by the Security Office and therefore he/she should gain a thorough knowledge of the access management solution.
The activities of the Security Officer will mainly be focused on the following fields:
- Definition, organization and monitoring of the day-to-day activities related to users and the assignment of accesses to the users;
- Define and implement the roles & their hierarchy for granting access to assets of the organisation;
- Ensure the implementation of the Access Management Solution;
- Provide support and expertise to any stakeholders impacted by User Management activities;
- Enforce the Access Management rules, strategies and policies;
- Actively contribute to the continuous improvement of the Access Management Solution.