Tribe Security Officer

WHO WE ARE
Arval Technical Centre (ATC) designs and delivers software and cybersecurity solutions for Arval, the leader in long-term vehicle leasing and mobility. ATC is part of Arval Competence Centre Warsaw (ACCW), the newest competence centre of BNP Paribas Group, whose financial teams specialize in credit risk assessment and onboarding of clients and suppliers. We build on that business expertise, connecting it with software engineering and cybersecurity to create systems and AI-powered solutions around real business needs.
Our work goes well beyond Poland. We contribute to international IT projects as part of Arval IT global structures, working alongside technology teams across Europe. Our goal is to build technology in Warsaw that has a real impact on Arval's global digital transformation.
YOUR ROLE
We are looking for a Tribe Security Officer who will oversee GRC (Governance, Risk and compliance), security, IT risks, IT continuity within the perimeter of one or two tribes.
A tribe can have up to 100 agile members who design, develop, test and maintain a portfolio of applications.
This position will require autonomy, self-organization and mastering several processes.
WHAT YOU WILL DO
Ensure the deployment of Arval’s security, continuity, IT risks and Third-party risk management policies in the tribe.
Influence decisions in line with security objectives.
Evaluate / formalize IT risks and mitigation measures
Monitor remediation plans
Promote security through DevSecOps concepts and ensure that applications are embedded in security tools when they are eligible (SAST, AVS, PENTESTS, SCA)
Participate in the remediation of vulnerabilities
Contributes to Sprint Planning and Backlog Review whenever required
Provide reports on the security level / vulnerabilities of applications within its scope to the CoE IT Risk and Cyber Security
Share best practices with the IT & Cyber Security central team and other Tribe Security Officers
Provide evidence for internal control plan and audits
WHAT YOU BRING
At least 5 years’ experience in GRC, audit, cyber security or IT risk management
You are comfortable in the international environment and speak English fluently
You're autonomous, agile, able to meet deadlines
Very good command of English, both written and spoken, as you will work with international teams across Europe
Certifications such as ISO27005,22301, CISPS will be a plus
WHAT'S THERE FOR YOU
As part of Arval Technical Center, you will have the opportunity to grow within an established market leader part of the BNP Paribas Group. Additionally, you'll find 30+ benefits to support your well-being, personal development and work-life balance. From fitness sessions and team events to after-hours get-togethers and even massages at the office, there's plenty to enjoy beyond your daily tasks.
And there's more! As a member of Arval, you can also discover our unique mobility benefits - including car, bike and scooter rentals, as well as mobility and fuel cards - and the special BNP VIP offer for Group employees.
KUP – Tax-deducitble costs (20-70%)
Private Medical & Psychological Care
MultiSport Card & Sport Activities (tennis, squash, yoga, football)
Language Courses & Business Trainings
Subsidy for Vacation & Additional Day of Holiday
Lunch Card & Benefit Platform
and more, check our profile to learn about our offer!
Important info!
Location: Based in Warsaw
Hybrid working (50/50 - weekly)
We inform you that Arval Service Lease Polska Sp. z o.o. and Arval Competence Centre - Arval Service Lease Polska Sp. z o.o. Branch in Warsaw have an internal procedure for reporting breaches of law and taking follow-up actions (Whistleblowing Procedure), which is available on the Arval Service Lease Polska Sp. z o.o. website: https://www.arval.pl/ogolne/whistleblowing