Discover ING Hubs Romania
ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of ๐จ๐ฏ๐๐ซ ๐๐๐๐ ๐ก๐ข๐ ๐ก-๐ฉ๐๐ซ๐๐จ๐ซ๐ฆ๐ข๐ง๐ ๐๐ง๐ ๐ข๐ง๐๐๐ซ๐ฌ, ๐ซ๐ข๐ฌ๐ค, ๐๐ง๐ ๐จ๐ฉ๐๐ซ๐๐ญ๐ข๐จ๐ง๐ฌ ๐ฉ๐ซ๐จ๐๐๐ฌ๐ฌ๐ข๐จ๐ง๐๐ฅ๐ฌ.
We started out in 2015 as INGโs software development hub, then steadily expanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities and ๐จ๐ฉ๐๐ซ๐๐ญ๐ ๐๐ซ๐จ๐ฆ ๐ญ๐ฐ๐จ ๐ฅ๐จ๐๐๐ญ๐ข๐จ๐ง๐ฌ: ๐๐ฎ๐๐ก๐๐ซ๐๐ฌ๐ญ ๐๐ง๐ ๐๐ฅ๐ฎ๐ฃ-๐๐๐ฉ๐จ๐๐.
๐๐ฎ๐ซ ๐ญ๐๐๐ก ๐๐๐ฉ๐๐๐ข๐ฅ๐ข๐ญ๐ข๐๐ฌ ๐ซ๐๐ฆ๐๐ข๐ง ๐ญ๐ก๐ ๐๐จ๐ซ๐ ๐จ๐ ๐จ๐ฎ๐ซ ๐๐ฎ๐ฌ๐ข๐ง๐๐ฌ๐ฌ, with more than 1800 colleagues active in Data Management, Touchpoint Channels & Integration, Core Banking, and Global Products.
We enjoy a flexible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.
For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things and they love doing it in good company. Do you?
Your ย mission
As an OpsRiskย Engineer will be part of the Financial Markets domain.ย
You will help on risk subjects like:ย ย ย ย ย ย ย ย
Act as a central SPOC for all incoming IT risk assessments and control evidencing requirements adhering the established control framework, SOx requirements and industry best practices.
Monitoring, tracking and managing deviations to established IT Risk controls.
Mediating between 1st LOD/2nd LOD and DevOps teams.
Conducting walkthroughs with auditors to review and validate IT Risk control processes.
Lead technical due diligence sessions with third party vendors.
You will work in an AGILE environment, following SCRUM methodology together with DevOps squads, helping to maintain a safe and secure application.
Your Day to Day
Your primary mission is to help the squads to implement IT Controls and to prove the controls are implemented effectively:
ensure we are in control of our risk appetite
define and document adequate risk processes and collect the evidences in regards; make sure that the different risk parties agree with the evidences
responsible for creating documents and project management requirements or specifications
provide documentation support to the technical team; interface with developers and operation engineers to define the specifications
liaison between the team and other IT Risk professionals
understand the need for security and apply it using the existing framework; constant communication about changes
participate in automation program for process and evidence for IT risk
show proactivity and flexibility, come up with plans of action and adapt approaches if necessary
understand the corporate climate and culture and act as an ambassador; IT custodianship/asset owner role.
What youโll bring to the team
Experience:
Degree and/or experience in IT risk management, cybersecurity, or related field.
Understanding of fundamental IT risk and security concepts and ability to think critically across technical control domains.
Knowledge of IT control frameworks (eg. SOX, GDPR, CSA CCM) and industry standards (eg. ISO2700x, NIST).
Proven track record of conducting IT control evidencing, qualitative risk assessments and developing mitigation strategies.
Risk reporting and communication:
ability to communicate risk-related concepts to technical stakeholders.
experience in liaising with second line risk functions.
strong written and verbal communications skills in English.
Certifications such as CISSP, CISM, CRISC or equivalent are a plus.
Knowledge:
Mandatory:
Ability to understand the risk processes in an IT environment
Experience with IT risk standards
Ability to make clear and convincing statements related to risk procedures Proven planning and organizing experience
Nice to have:
Project management experience
Ability to track, plan and coordinate projects related to third party risk management,ย technical compliance, and/or IT risk automation
Experience in working with Dev(Sec)Ops teams across vulnerability management, threat hunting, security detection and response and developing, or contributing to information security policies and procedures
Knowledge of Agile methodology
Foreign languages:ย English (advanced)
Education: nice to have Bachelorโs Degree (or higher) in an IT related field.
If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on ourย website (make sure to scroll until you reach the Data Protection section/ Candidates tab).ย