About the department
Wholesale Banking CISO/ ISM team as 1st line of defense drives WB-wide Information security and Cyber Security regulatory compliance, focuses on rolling out Security standards & procedures, facilitating training & awareness, Frontier AI, risk management, security advisory and vulnerabilities management.
The objective of the WB CISO/ISM team is to ensure executive and technical leadership and oversight of product security, operational technology, and initiatives. Provide vision and subject matter expertise necessary to manage information security risk to the organization to ensure business alignment, effective governance, operational efficiency, security monitoring and measurement.
Responsibilities
Drive implementation and continuous improvement of information security governance frameworks following the ING Risk Management practices.
Perform cybersecurity Identity and access management risk assessments on High Privilege Access and control reviews across business and technology assets.
Act as a team member supporting a change management business as usual and automation initiative by providing analysis or monitoring progress with guidance from WB CISO.
Act as process group owner to conduct research on controls and processes to enable analysis of key themes and trends using primary data sources for quarterly risk opinion.
Assist in assessing compliance with information security policies, regulatory requirements, and control standards.
Track and report security findings, issues, exceptions, and remediation progress.
Responsible for developing management reporting, dashboards, risk metrics, and governance updates.
Collaborate with Technology, Risk, Compliance, Audit, Legal, and Business stakeholders to drive security outcomes.
Implement required cyber security measures, such as IAM, CHM, 3rd party assessments and provide input on their design, monitoring performance to notify engineers experts of any problems.
Support enterprise security initiatives, regulatory remediation programs, and strategic cybersecurity projects.
Provide governance guidance for technology transformations, third-party engagements, and new business initiatives.
Promote a strong security and risk management culture across the organization.
Experience with enterprise AI tools and governance.
Act as IT Security team SME to align activities with 2nd line of defence and share content knowledge and provide pragmatic solutions for DevOps teams.
Develop and mature the ING information security program, ensuring compliance with relevant regulations and standard methodologies and provide SME support Identity and access management.
Liaison with the technical teams to ensure alignment between the security and business, thus coordinating the strategic/ tactical planning.
Contribute as SME in the development, implementation, and maintenance of a strong information privacy and security program to meet ING risk appetite on quarterly basis.
Manage IT security standards and procedures to ensure they are developed/updated/reviewed.
Develop, implement, and maintain information security monitoring roadmap to align with firm KPI/KRI’s.
Qualifications and Competencies
Bachelor’s or master’s degree in computer science or a related field.
3+ years’ experience in Information Security, Risk Management, Identity and Access Management, Cyber compliance, IT Audit, Dev Sec Ops, Frontier AI.
CISM certification and Certified in Cyber Security (CC by ISC2), highly preferred.
Familiar with non-financial risk models and threat assessments.
Proven analytical ability to solve complex business and technical problems, critical thinker able to level, communicate and educate on both Senior Management and other SMEs in information technology teams.
Poise and the ability to act calmly and competently in high-pressure, high-stress situations.
Abreast on new tools and technologies related to information security.
Demonstrated experience with various information security controls, including integration with secure IAM tooling’s, systems security, encryption systems, and application security.
Like to continuously develop your (technical) expertise and knowledge
Like to work as an independent professional, i.e., be pro-active, have high-quality standards and work according to the planning.
Like to interact with Information Security Specialists and Senior Management to build strong relationships.
A critical, though positive constructive mind set, accurate and thorough., connect self-reflection and action.
Deep knowledge and experience with security and regulatory compliance as well as external audits.
Prepared to challenge the program and Information security 2nd line of defence and have the "difficult conversations” where needed in the interests of ING policies & standards.
Salary Range: $85,000-110,000
The salary range listed reflects base salary only. This role is eligible for participation in a discretionary bonus program.
In addition to comprehensive health benefits (including a $0 premium medical plan with HSA), a generous 401k savings plan, and competitive PTO, ING provides a broad array of benefits including adoption, surrogacy, and fertility services; student debt assistance; and subsidies for expenses associated with commuting and fitness.
ING is a committed equal opportunity employer. We welcome applicants of diverse backgrounds and hire without regard to race, gender, religion, national origin, citizenship, disability, age, sexual orientation, or any other characteristic protected by law. We celebrate these differences and rely upon your unique perspective to innovate and seize new opportunities. Come as you are.
ING Bank does not have a commercial banking license in the U.S. and therefore not permitted to conduct a commercial banking business in the U.S. Through its wholly owned subsidiary ING Financial Services LLC, and its affiliates, it offers a full array of wholesale products such as commercial lending and a full range of FM products and services.
