BNP Paribas
IT Operational Permanent Control

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Purpose
Reporting directly to the IT Governance Manager, the IT OPC role is to assist the IT Governance Manager to ensure the IT's operational risk framework is being monitored in accordance with Group’s model.
The IT OPC will ensure that issues identified through control testing and incident management are escalated to the IT Governance Manager to be reviewed.
Supporting the embedded Governance framework of incident management, control testing, and ad hoc audits involving IT.
Key Responsibilities
Control Testing
- Ensure the quarterly controls have been communicated to the relevant Subject Matter Experts (SME) in a timely manner.
- Regular reminders sent to SMEs ensuring control testing is completed by the deadline set locally.
- Support the review of evidence supplied – highlighting discrepancies to the IT Governance Manager.
- Provide a summary of the control testing throughout the collection of comments/evidence and once completed the control ratings and associated action plans for the IT Governance committee.
Action Plans
- Following control testing results, support the implementation of Action Plans to support the mitigation and remediation of control points marked unsatisfactory or marginally satisfactory.
- Follow up the implementation of the action plans with relevant owners on a regular basis to ensure these are completed by the deadlines set.
- Provide a summary of the action plans due and overdue for the IT Governance committee.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Procedures
- Ensuring all IT procedures follow a standard template with inclusion of Group policy references.
- Ensure procedures are updated on at least an annual basis.
- Reporting of procedures due and overdue in the IT Governance Committee.
- Incident Management
- Ensure the incidents are moved to closure and monitored by:
- Booking of stakeholder meetings.
- Collection of root cause and mitigating actions to close the incidents.
- Support the business by providing root causes/fixes where there is an IT involvement.
- Provide a summary of the incident volumes for the IT Governance Committee.
- Ensure the incidents are moved to closure and monitored by:
Audit Support
- Support the IT Governance Manager during audits where possible by supporting:
- Collection of evidence.
- Organise stakeholder meetings.
- Coordination of SMEs in the business to attend meetings.
The role requires the use of Group Tools (training to be provided by the IT Governance Manager).
Company Initiatives
- To ensure that all legal, regulatory and statutory obligations are met within own area of responsibility and Compliance is embedded within the business.
- Take responsibility for the Health and Safety of yourself and others whilst at work.
- Participate in training as required and build on own professional development and expertise.
- Support and demonstrate company values.
- Keep up to date with any industry-wide developments.
- Comply with Data Protection Legislation with regard to the disclosure of information.
- Comply with all requirements from regulatory bodies.
- Carry out any other reasonable tasks as requested by management.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Employee Specification
Criteria
| Essential | Desirable |
|---|---|
| Qualifications | Good Operational Experience |
| Skills | |
| Adept to learning | Can question and challenge |
| Interpersonal skills | Attention to detail |
| Good team worker | Can analyse and write clear summary reports |
| Technical writing capability | |
| Knowledge | |
| Microsoft SharePoint | |
| BNPP PF UK operating model | |
| Solid understanding of IT | Department operating model |
| Some understanding of Operational Risk | Basic knowledge of FCA's Role and of the TCF, Conduct Risk and Data Protection Principles |
| Previous Experience | |
| Working to deadlines | Management of Projects |
| Supporting regulatory audits | Experience Required |
| Previous operational role within BNPP PF UK or similar roles in a retail finance company |
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills