IT Risk Officer

Role Summary

As an IT Risk Officer within the Financial Markets domain, you will act as a trusted partner to DevOps squads, risk teams, auditors, and global stakeholders. Your role will focus on strengthening IT controls, supporting risk governance processes, and ensuring effective evidence management across our technology environment.

You'll work in an Agile setting, helping teams maintain secure and compliant applications while continuously improving risk processes and controls.

About the Team

You'll join a collaborative, international environment that supports business units across ING globally. Working closely with DevOps teams, risk professionals, security specialists, auditors, and third-party vendors, you'll play an important role in helping ING maintain a strong risk and control framework.

This is an opportunity to work with modern technologies, engage with global stakeholders, and contribute to meaningful initiatives that strengthen the security and resilience of our organization.

What You'll Do

•        Act as a central point of contact for IT risk assessments and control evidence requirements.

•        Monitor, track, and manage deviations from established IT risk controls.

•        Partner with DevOps squads to implement and demonstrate effective controls.

•        Facilitate discussions between first-line and second-line risk teams.

•        Conduct walkthroughs and provide support during internal and external audits.

•        Support technical due diligence reviews of third-party vendors.

•        Define, document, and improve risk processes and control evidence practices.

•        Contribute to risk automation and continuous improvement initiatives.

•        Communicate risk-related topics clearly to technical and non-technical stakeholders.

•        Promote a culture of accountability, security, and risk awareness.

What We're Looking For

Required Skills

•        Strong understanding of risk processes within an IT environment.

•        Experience working with IT risk standards and control frameworks.

•        Ability to communicate and present risk procedures in a clear and convincing manner.

•        Proven planning, coordination, and organizational skills.

•        Strong written and verbal communication skills in English.

•        Experience in IT risk management, cybersecurity, or a related field.

•        Knowledge of IT control frameworks and standards such as SOX, GDPR, ISO 2700x, NIST, or similar.

•        Experience conducting control assessments, evidence collection, and risk mitigation activities.

Nice to Have

•        Project management experience.

•        Exposure to third-party risk management, compliance, or IT risk automation initiatives.

•        Experience working with DevSecOps teams.

•        Knowledge of Agile ways of working.

•        Bachelor's degree in an IT-related field.

•        Certifications such as CISSP, CISM, CRISC, or equivalent.

What We Offer

•        Opportunities to collaborate with global stakeholders across ING.

•        A modern technology environment focused on innovation and continuous improvement.

•        Exposure to complex risk and security challenges within an international banking organization.

•        An Agile workplace where learning, collaboration, and professional growth are encouraged.

•        The opportunity to make a meaningful impact on the security and resilience of critical banking services.

Worried about the wage gap? So are we.

Our commitment to pay equity means you'll be valued for your skills, not your gender. We especially encourage women in cybersecurity and IT risk to apply and help us build diverse teams that drive better outcomes.

How to Apply

Click the apply button on our careers site and submit your application through Workday. We look forward to learning more about you.

Job Application Safety Reminder   

We're seeing an increase in fraudulent job offers. To protect yourself, please follow these key guidelines when applying for roles at ING:

•        Apply only via official ING platforms. ING uses Workday as its internal recruitment system.

•        Check the sender's email carefully. Legitimate communication will always come from @ing.com and/or @myworkday.com.

•        No payments or banking details will ever be requested. If someone asks for this information, it's a scam.

About ING

With 65,000 employees and operations in approximately 40 countries, there is no shortage of opportunities for people with initiative who want to help people take a step ahead in life and in business. Do you want to work at the cutting edge of what's possible and at the same time ensure you work with integrity and hold the customer's interests at heart? Do you want to be surrounded by progressive, inspiring, diverse and supportive colleagues? Then there is no better place to invest your talents than at ING. Join us. Apply today.