I

ING

Digital banking and sustainable lending

Cyber Risk Expert

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeMadrid, SpainNo salary listed

About the Job

Requirements

  • A minimum of 8 years of experience in cybersecurity, cyber risk, information security, technology risk, governance, risk and compliance, or enterprise risk management.
  • Proven experience with cyber risk assessments, risk registers, control frameworks, and risk reporting.
  • Experience managing third-party and technology risks, including cloud and AI-related risks.
  • Strong understanding of AI governance and AI risk management principles.
  • Knowledge of risk, security, and regulatory frameworks, including NIST, ISO 27001, COBIT, DORA, EBA/ECB supervisory expectations, GDPR, and related financial-sector security requirements.
  • Experience with GRC platforms such as OneTrust, ServiceNow IRM, Archer, or equivalent.
  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or Risk Management, or equivalent experience.

Responsibilities

  • Conduct cyber, technology, AI, and third-party risk assessments.
  • Manage and maintain the cyber risk register, including risk treatment, tracking, and reporting.
  • Evaluate security policy exceptions and risk acceptance requests.
  • Assess AI solutions, use cases, and third-party providers from a risk and control perspective.
  • Support third-party risk management and vendor security due diligence.
  • Produce risk metrics, key risk indicators, dashboards, and executive-level reporting.
  • Advise stakeholders on risk mitigation strategies and control effectiveness.
  • Support regulatory, audit, compliance, and supervisory engagements.
  • Contribute to the continuous improvement of cyber risk management and AI governance frameworks.
  • Act as a trusted advisor to senior management on cyber and AI risk matters.

Desired Qualifications

  • 10 or more years of experience within large, regulated organizations.
  • Relevant certifications such as CISSP, CISM, CRISC, CISA, CGRC, or equivalent.

About the Company

ING

Digital banking and sustainable lending

ING provides digital banking and financial services to individuals and businesses worldwide. Its products and services include online and mobile banking, lending, payments, and advisory services designed to be frictionless so customers can make confident financial decisions. ING differentiates itself by focusing on sustainable choices, responsible lending, and sharing knowledge to help customers and partners realize their visions for a better future. The bank emphasizes empowerment over judgment and aims to finance change, partner with customers, and continuously innovate in a sustainable way. Its goal is to help people and businesses progress toward their goals while reducing barriers and making banking easier and more responsible.

Company size
10,001+
Company stage
IPO
Headquarters
Amsterdam, Netherlands
Founded
1991

Recently Posted Jobs

Explore more opportunities at ING

See more jobs