* Enrich the Forensic service catalogue with Fraud forensic investigations for BNP Paribas Asia Pacific
* Build the Forensic Investigation framework to deliver Forensic service to the APAC BNP Paribas métier and business such as: Compliance, Legal, Operational Risk Control
* Test, implement and deploy Forensic tools and technologies to deliver the expected catalogue of services for the business lines and métiers
* Conduct analyses related to forensic investigations, cybercrimes, and/or cyberattacks from inside and external threat actors.
* Develop processes to enable forensic investigations and evidence to be court-admissible
* Perform threat management and protection against threats including malware, phishing, hacking and DDoS
* Experience conducting computer forensic analysis, maintaining chain of custody and testifying on evidence collected.
* Investigation and recommendations to identify gaps from the incident.
* Manage projects related to cyber security investigation and forensic examination.
* Review and Update Incident Management Procedure.
* Develop and Update operational playbook e.g. DDOS, ransomware
* Prepare investigation report and KPI indicator on security incidents.
* Co-ordinate and liaise with global, regional and local incident response team.
* Co-ordinate with internal security teams for incident response.
* Assist with routine compliance and audit functions to ensure requirements are satisfied.
* Provide input to the department’s management for enhancing the information security strategy.
* Stay current on security industry trends, mitigation techniques, security technologies and new and evolving threats to the organization by attending conferences, networking with peers and other education opportunities.
Contributing Responsibilities
* Contribute to the Permanent Control framework for implementation of policies and procedures in day-to-day business activities, such as Control Plan
* Comply with regulatory requirements and internal guidelines.
* Contribute to the reporting of all incidents according to the Incident Management System.
Technical and Behavioral Competencies required
* Exceptional communication and advocacy skills, both verbal and written, with the ability to express complex technical issues in an easily understood manner.
* Ability to collaborate and communicate effectively and respectfully with both business-oriented executives and technology-oriented personnel in teams across the organization
* Team player
* Computer Forensic experience with sound knowledge of Encase, X-Ways and Cellebrite
Experience and Qualifications
* Bachelor’s degree in Computer Science, Information Assurance, or a related degree or equivalent experience.
* At least 6 years of relevant working experience, CISSP or equivalent security certification mandatory. Strong candidate without security certification could be considered with commitment to obtain a security certification during probation period.
* Holder of information Security and Forensics Certificate (i.e. GIAC, CCME, CEH, Encase) preferred.
* Background in Fraud incident management in a regulated environment is a plus.