IT Risk Expert

At ING Hubs Spain we are looking for an IT Risk Expert (second line of defense role) to join our ING Hubs Spain Team. The role sits at the intersection of technology, regulation and business strategy, helping ING manage information and technology risks at scale across multiple countries.

Your Impact

You will be part of the international Information Risk Management (IRM) team, supporting ING entities across Europe (Netherlands, Belgium, France, Italy, UK, and WB) and the Global Information & Technology Risk department. Your work directly strengthens ING’s resilience, security posture and regulatory readiness.

Key Responsibilities

• Act as a trusted IT Risk advisor to IT leaders and business management.
• Translate complex technology risks into clear, actionable insights for decision‑makers.
• Influence how ING designs and operates its Information & Technology Risk framework.
• Provide hands‑on Information Risk Management (IRM) support to local and global IRM officers and IT stakeholders.
• Perform risk analyses, risk papers and executive‑level reporting (strategic and ad‑hoc).
• Challenge, review, and improve risk controls through QA reviews and oversight activities.
• Participate in, challenge, and periodically report upon the IT risks of key strategic ING programs and projects.
• Monitor external/internal developments (regulatory, technological, threat landscape), assess their impact on ING and translate these pro‑actively into IRM mission, vision and strategy.
• Support the IRM Leadership (Local, Global and Hubs Leads) with research, fact‑finding, collecting evidence and risk assessments.
• Contribute to the development and maintenance of ITR frameworks, standards, procedures and methodologies.
• Support regulatory interactions and follow‑ups (e.g. ECB, audits, regulatory change initiatives).
• Help design and deliver training and awareness for Non‑Financial Risk colleagues.

Qualifications

• Solid experience in Information/IT Risk Management, Cyber Security, IT Governance or Technology Risk.
• Deep understanding of IT security and risk management processes (availability, integrity and confidentiality of information and systems).
• Experience advising stakeholders on complex risk topics.
• Strong analytical and writing skills – the ability to turn complexity into clarity.
• Knowledge of GRC frameworks and compliance standards (ISO/IEC 27001, NIST CSF, NIS2, SOC½).
• Proactive mindset: identifying risks and helping to solve them.
• Ability to challenge risk decisions constructively and advise on complex matters relevant to senior management.
• Proven stakeholder management and engagement skills.
• Good presentation skills.
• Certification such as CISM, CRISC, CISA or equivalent (extra points).
• Data analytics and PowerBI skills (plus).
• Experience with DORA, EU AI Act (plus).

Benefits

• Flexible work model – choose the days you work from home and the days you attend the office.
• Restaurant card, electric‑mobility solutions, doctor, hairdresser, gym and other convenience services.
• Health insurance for you and your family.
• Life insurance.
• Flexible remuneration model with tax‑advantaged options such as nursery, transport card and training aids.
• Transport allowance.
• Pension plan available after one month of employment.