The role combines broad cybersecurity expertise, independent judgment, cross-functional influence, and discipline of technical program/project management. It supports the CISO in shaping priorities, coordinating complex initiatives, resolving delivery risks, and ensuring that technology change produces sustainable risk reduction, operational resilience, and regulatory readiness.
About the department
Wholesale Banking CISO/ ISM team as 1st line of defense drives WB-wide Information security and Cyber Security regulatory compliance, focuses on rolling out Security standards & procedures, facilitating training & awareness, Frontier AI, risk management, security advisory and vulnerabilities management.
The objective of the WB CISO/ISM team is to ensure executive and technical leadership and oversight of product security, operational technology, and initiatives. Provide vision and subject matter expertise necessary to manage information security risk to the organization to ensure business alignment, effective governance, operational efficiency, security monitoring and measurement.
Responsibilities
Support the CISO in delivering key cybersecurity, technology, resilience, and governance priorities mainly around High privilege access, Change Management, and cyber resilience.
Coordinate security projects across technology, business, business, risk, legal, compliance, audit, and global security teams on different technology projects and provide subject matter expertise where required.
Prepare clear updates for management on progress, key risks, required decisions, and upcoming priorities.
Track cybersecurity projects, action items, regulatory requirements, and remediation activities through completion.
Support the secure use of Frontier AI by helping conduct risk assessments, define security controls, and monitor governance implementation.
Work with technology, data, privacy, legal, and business teams to include security requirements throughout the design and use of AI agentic solutions.
Monitor AI-related threats and emerging technologies and enforce recommend practical improvements to security controls and processes and assist CISO in security architecture reviews.
Help coordinate ransomware readiness and cyber recovery activities, including scenario testing, tabletop exercises, critical service dependencies, lessons learned, and remediation tracking.
Manage cybersecurity initiatives by defining responsibilities, milestones, dependencies, risks, and expected outcomes, while helping teams resolve delivery challenges.
Support cyber risk assessments, audits, regulatory reviews, control improvements, and issue remediation while building effective working relationships across regional and global teams.
Qualifications and Competencies
Bachelor’s or master’s degree in cybersecurity, computer science, engineering, information systems, risk management, business, or related discipline. An advanced degree is beneficial.
6+ years of relevant experience across cybersecurity, technology, cyber resilience, security governance, or technical program management in a complex enterprise.
Demonstrated Subject matter expertise enterprise in cybersecurity or technology programs involving different global stakeholders, technical teams, risk functions, auditors, or regulators.
Strong working knowledge of AI security, ransomware resilience, cyber recovery, security architecture, Red/Blue team and modern security technologies.
Experience in a highly regulated financial services environment is strongly preferred.
Proven ability to translate complex technical and risk matters into actionable roadmaps, executive decisions, and measurable outcomes.
Program management experience across roadmaps, dependencies, risk and issue management, governance, implementation readiness, and benefits realization.
Relevant certifications such as CISSP, CISM, CRISC, CCSP, PMP, or equivalent are preferred to be a blend of cybersecurity and program-management credentials is beneficial.
Cybersecurity foundational and technical understanding.
Frontier AI security governance and emerging technology risk.
Ransomware resilience, incident preparedness, and cyber recovery.
Technical program and portfolio management.
Cyber risk, controls, audit, and cyber regulatory readiness.
Operational excellence, automation, and measurable risk reduction.
Salary Range: $143,000-181,000
The salary range listed reflects base salary only. This role is eligible for participation in a discretionary bonus program.
In addition to comprehensive health benefits (including a $0 premium medical plan with HSA), a generous 401k savings plan, and competitive PTO, ING provides a broad array of benefits including adoption, surrogacy, and fertility services; student debt assistance; and subsidies for expenses associated with commuting and fitness.
ING is a committed equal opportunity employer. We welcome applicants of diverse backgrounds and hire without regard to race, gender, religion, national origin, citizenship, disability, age, sexual orientation, or any other characteristic protected by law. We celebrate these differences and rely upon your unique perspective to innovate and seize new opportunities. Come as you are.
ING Bank does not have a commercial banking license in the U.S. and therefore not permitted to conduct a commercial banking business in the U.S. Through its wholly owned subsidiary ING Financial Services LLC, and its affiliates, it offers a full array of wholesale products such as commercial lending and a full range of FM products and services.
