Data Risk Expert

Discover ING Hubs Romania 

ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of over 2000 high-performing engineers, data, risk, and operations professionals.  

We started out in 2015 as ING’s software development hub, then steadily expanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities. 

Our tech capabilities remain the core of our business, with more than 1800 colleagues active in Data and Analytics Tech, Tech Foundation and Channels, Retail Core Banking and Architecture, and Global Products and Technology Services.  

We enjoy a structured hybrid way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.   

For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things, and they love doing it in good company. Do you?   

Here’s a sneak peak of what our colleagues say about working within ING Hubs Romania: 

• At ING, we're building the solutions of tomorrow, today | 80% of our colleagues in Romania agree 

The Mission 

As a technology-enabled and digital-led bank, data is at the heart of everything we do. It powers how we measure risk, assess performance, and make decisions. To ensure we unlock the full value of our data, we must guarantee its completeness, accuracy, auditability, traceability, and protection. The Global Data Organisation serves as the first line of defence in securing robust data chains, working in close collaboration with all functions, business lines, and countries across the Bank.  

The Global Chief Data & Analytics Office (CDAO) plays a pivotal role in this mission. As a central organizational unit, the CDAO partners with stakeholders across the enterprise to enable frictionless customer journeys, support ESG-driven innovation, and deliver data products that enhance decision-making. With emerging trends such as digital wallets on the horizon and increasing regulatory expectations around data governance, the CDAO is evolving to meet these challenges head-on, ensuring our data remains both a strategic asset and a safeguarded resource.  

As part of the Global CDAO organization, the Global Data Management department is tasked with developing our design capabilities and establishing a comprehensive mandate for data frameworks and controls. The team defines, maintains, and continually enhances ING's global standards in areas such as Data Governance, Data Quality, Lineage, BCBS239 Reporting, End User Computing, AI and Data Ethics, Data Privacy, ensuring uniform application throughout the Bank and full alignment with both regulatory requirements (including BCBS239, GDPR, EU AI Act, DORA) and ING’s business objectives.  

The Data Risk Expert defines, embeds, and oversees the enterprise-wide data risk management capability, ensuring effective management of data risk in line with internal standards and regulatory requirements. The role covers key risk areas including Data Governance & Architecture, Data Quality, Reporting, Data Ethics, and AI/(Gen)AI Data.  

The role acts as a key enabler of the first line of defence, working closely with business and country domains, CDOs, and data owners to ensure data risks are proactively identified, assessed, and mitigated. It also ensures that data-related control frameworks (e.g., Data Management, BCBS239, and NFR controls) are effectively implemented and monitored.  

 The Data Risk Expert drives the uplift of data risk maturity through a single, consistent approach to defining, measuring, and managing data risk across all countries and domains, embedding risk-by-design into data products, platforms, and processes, and integrating data risk into strategic initiatives, transformation programs, and regulatory commitments. Ultimately, the role safeguards the bank’s ability to rely on data for risk management, regulatory reporting, and decision-making, while providing senior management and regulators with transparent, actionable insight into data risk exposure.  

As Data Risk Expert you demonstrate a highly pragmatic, hands-on approach and bring a strong proactive, go-getter mindset.  

Your day to day 

As a Data Risk Expert, you are responsible for overseeing multiple data risk domains and their associated activities:  

Bank-wide RCSA (GDM Control Standards, Data Protection, AI/Ethics)  

• Lead and coordinate end-to-end RCSA process across all GDM Control Standards, Data Protection, and AI/Ethics  

• Drive kick-off, methodology, and instructions for stakeholders and ensure follow-up on identified risks and issues  

• Consolidate and deliver reporting and insights (report-out)  

• Define and monitor risk responses and mitigation actions  

• Align with 2nd Line Data Risk on reporting of 1st Line risks and issues (MT, Data Risk Committee, BNFRC)  

• Co-develop and maintain the Data Management risk appetite statement (in collaboration with 2LoD)  

KCM Approach & Planning  

• Define scope and approach for Key Control Monitoring (KCM) across all 3 GDM Control Standards (Test of Design / Effectiveness)  

• Provide oversight on annual KCM planning, coordination, and timelines  

• Ensure alignment with NFR procedures and required testing timelines  

• Align with ODCR on resource allocation and delivery planning  

• Maintain and oversee control implementation tracking (KCT, Attestations, Continuous Monitoring)  

KRIs (Key Risk Indicators)  

• Define and maintain data-related KRIs aligned with risk framework  

• Own and coordinate KRI reporting (via iRisk)  

• Monitor threshold breaches and risk signals  

• Assess impact of data risk exposure  

• Provide management reporting (MT) on risk exposure and progress  

• Align with 2nd Line Data Risk (policy owner) on KRI definitions and reporting  

iRisk (MIA & CAS Items)  

• Provide end-to-end oversight of iRisk items (global and local)  

• Monitor and follow up on remediation actions and progress  

• Register and track waivers and deviations  

• Ensure alignment with risk issue owners and CAS teams  

• Drive closure of iRisk issues (including: Preparation of closure memos and Collection and validation of supporting evidence)  

Data Ethics  

• Establish and oversee data ethics governance  

• Safeguard ethical use of data across the Lifecycle  

• Ensure compliance with data ethics principles and regulations  

• Drive data ethics risk identification and mitigation  

• Oversee data ethics committees and decision-making  

• Define and monitor data ethics metrics (KRIs/KPIs)  

• Enable data ethics awareness and culture  

What you’ll bring to the team 

We are looking for a results-driven professional with a strong bias for execution, capable of delivering large scale initiatives in complex environments. The ideal candidate demonstrates sharp regulatory insights, solves problems effectively, and influences others through collaboration and active listening. 

• Mandatory: 

• Proven experience with control standard implementation, monitoring, and stakeholder management  

• Excellent organizational, analytical, and communication skills  

• Experience in process optimization, automation, and Agile delivery methodologies  

• Ability to explain complex issues in a clear, compelling way to gain buy-in  

• Excellent level of English 

• Nice to have:   

• Experience in regulatory reporting, audit, or control design, ideally in banking  

• Strong knowledge of data management, ethics, reporting control frameworks, and regulatory requirements  

• Education: master or bachelor’s degree in relevant field 

If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on our website (make sure to scroll until you reach the Data Protection section/ Candidates tab).