Third Party Operational Risk Specialist

Discover ING Hubs Romania

ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of over 2000 high-performing engineers, risk, and operations professionals. 

We started out in 2015 as ING’s software development hub, then steadily expanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities and operate from Bucharest.

Our tech capabilities remain the core of our business, with more than 1800 colleagues active in Data and Analytics Tech, Tech Foundation and Channels, Retail Core Banking and Architecture, and Global Products and Technology Services. 

We enjoy a flexible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.  

For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things and they love doing it in good company. Do you?  

The mission

You will support the Third Party Management (TPM) Policy Owner to ensure that it is in line with the applicable laws and regulations and will monitor the implementation of such requirement. Using the non-financial risk management tools that are being implemented bank wide/ in all locations (e.g. Key Control Testing activities/ Issue management/ Event management/ Risk Reporting etc), you will be able monitor the implementation and flag any deficiencies. You report hierarchically to the Lead NFR.

What makes your role interesting and challenging, is the diversity of the non-financial risk domains that you can cover; you have the opportunity to build up these activities in the best way it suits us as a team and as an organization. Even though the tools we use are the same, the Third Party Risk Management Policy has its own specificities and different stakeholders that requires a tailored approach. 

Your day to day

• Setting and maintaining TPM related policies and mandatory instructions;
• Challenging, advising on, and improving control standards, procedures, and templates;
• Providing expertise and functional steering to local NFR teams globally;
• Overseeing TPM risk across the bank, ensuring all material risks are registered, reported, and escalated as needed;
• Leading thematic deep dives and reviews on TPM risk;
• Training junior team members and communicating requirements to local NFR teams;
• Monitoring regulatory developments and ensuring ING’s compliance with relevant guidelines (EBA Outsourcing GL, DORA);
• Driving simplification and risk-based approaches in NFR processes

Specific Tasks and Responsibilities:

• Leading policy setting and maintenance for TPM, in collaboration with the NFR Framework & Control team;
• Overseeing compliance and simplification of NFR-owned documents and templates;
• Challenging 1LoD documents and templates (Control Standard, TPM Procedures, Decision Tree, KRIs);
• Supporting local NFR teams with TPM expertise and resolving escalations;
• Performing oversight of TPM risk and ensuring clear risk messaging in Bank Non-Financial Risk Dashboard (NFRD);
• Conducting thematic deep dives and reviews on TIPM risk.
• Training junior team members;
• Monitoring external regulatory developments and communicating requirements internally;
• Setting requirements for TPM RCSA and Decision Tree
• Communication & Training: build relevant content within the NFR community and engage the TPM community through Global calls and virtual teams;
• Work efficiently together with the local team as well as the virtual team; in and outside NFR, including 1LoD representatives (global teams as well as locations).

What you’ll bring to the team

• You are an experienced risk specialist with > 7 years of relevant experience;
• You have expert knowledge of Non-Financial Risk and regulatory requirements like EBA Guideline on Outsourcing Arrangements, European Guideline related to product oversight and governance requirements, Operational Resilience, DORA etc.; IT risk knowledge is a plus;
• You express yourself clearly and effectively, both in writing and verbally. You are able to effectively challenge colleagues in st LoD and 2nd LoD, both global and local;
• A team player with strong interpersonal skills who can operate in a diversified and multicultural work environment;
• Excellent analytical skills as well as a keen eye for detail;
• You are fluent in English;
• You have a university degree or equivalent.

If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on our website (make sure to scroll until you reach the Data Protection section/ Candidates tab).