Poste et missions
We are seeking a highly skilled and experienced Information Technology Risk 1LoD Analyst - to play a critical role in safeguarding Natixis CIB Americas IT and ensuring compliance with industry regulations.
They will serve as a key interface for the LoD1.1 Group (BCPE group and Natixis CIB at Head Office) and LoD2 (CISO, Operational Risk and Compliance) in relation to IT risk taxonomies and categories for LoD1 (Line of Defense 1).
This role is vital for ensuring the security and compliance of our Natixis CIB Americas IT, managing software assets effectively, and mitigating risks associated with information technology operations.
The successful candidate will possess a deep understanding of IT risk frameworks, software licensing agreements, and industry best practices. You will be responsible for supporting the Group IT Risk Management (ITRM) Framework, tailoring it to meet specific business or geographical needs, and leading initiatives to assess and enhance IT risk controls for Natixis. CIB Americas platform in coordination with the overall IT department.
Leadership and Strategy:
Strengthen the IT risk management strategy in alignment with Head Office (BPCE Group and Natixis CIB), organization’s goals and compliance requirements.
Support the Software Asset Management (SAM) program, including process optimization, governance frameworks and contributing ot the associated policy managed at LoD2.
Risk Assessment:
Participate and/or conduct regular risk assessments, vulnerability assessments, and audits to identify potential IT risks and recommend appropriate controls and mitigations.
Oversee and assist the identification, analysis, and prioritization of risks associated with IT systems, software applications, and third-party vendors.
Procedure and Runbook Development:
Establish and maintain IT risk management procedures and any associated runbook in accordance with industry regulations and best practices.
Ensure software asset management procedures and runbooks are effectively communicated and enforced across the organization.
Software Asset Management (SAM):
Oversee the lifecycle of software assets from acquisition to retirement, ensuring compliance with licensing agreements and optimizing software usage with alignment with Head Office processes.
Conduct daily health checks and completeness checks for all software assets in the IT Asset Management (ITAM) system.
Coordination and Collaboration:
Coordinate the Annual Recertification processes to ensure ongoing compliance and accuracy of software assets with the IT asset owners.
Liaise with relevant stakeholders to facilitate IT controls review and reporting, ensuring all controls are met and documented.
Work closely with internal and external auditors to manage audits including reviewing audit recommendations and timely closure
ITAM Tool Management:
Participate in the tool feature enhancements to improve functionality and ensure it meets organizational needs, especially around SAM area.
Manage enhancement requests for the tool, working with IT teams to prioritize and implement improvements.
Monitoring and Reporting:
Prepare risk and controls reporting, including controls, Data Risk Strategy (DRS), and operational risk reports for senior management.
Submit risk acceptances for CIO Office needs, ensuring proper documentation and justification for any exceptions.
Security and Compliance:
Coordinate the implementation and knowledge transfer related to Multi-Factor Authentication (MFA) for appropriate applications to enhance security measures.
Oversee ITAM controls operations to ensure adherence to established policies and procedures.
Training and Awareness:
Support implementation of training programs to educate employees on IT risk management practices and software licensing compliance.
Foster a culture of accountability and awareness around IT risk and asset management within the organization.
Continuous Improvement:
Stay current with industry trends, regulations, and emerging technologies related to IT risk management and software asset management.
Drive continuous improvement initiatives to enhance risk management processes and software asset utilization.
Qualifications
Bachelor’s degree in Information Technology, Information Systems, Computer Science, Risk Management or a related field.
Minimum of five years of relevant professional experience in IT risk management, IT controls, software asset management, IT asset management or a related area.
Strong understanding of IT risk frameworks, control processes and software licensing practices.
The salary range for this position will be between $150,000 - $190,000. Natixis is required by law to include a reasonable estimate of the compensation range for this role. Actual base salary will vary and will be based on several factors including, but not limited to, relevant experience, education, skills set, applicable licensure and certifications, and other business and organizational needs. Base salary is only one component of our total rewards package. Natixis also offers a generous benefits package, and you may be eligible for a discretionary incentive award depending on company and individual performance.