ING

IT Risk Officer

In short

This IT Risk Officer role at a global bank's Financial Markets domain focuses on strengthening IT controls, supporting risk governance, and managing control evidence across the technology environment. The position involves partnering with DevOps squads, risk teams, auditors, and third-party vendors in an Agile setting. It requires experience with IT risk management, control frameworks (SOX, GDPR, ISO 2700x, NIST), and strong communication skills to bridge technical and non-technical stakeholders.

Role Summary
As an IT Risk Officer within the Financial Markets domain, you will act as a trusted partner to DevOps squads, risk teams, auditors, and global stakeholders. Your role will focus on strengthening IT controls, supporting risk governance processes, and ensuring effective evidence management across our technology environment.
You'll work in an Agile setting, helping teams maintain secure and compliant applications while continuously improving risk processes and controls.
About the Team
You'll join a collaborative, international environment that supports business units across ING globally. Working closely with DevOps teams, risk professionals, security specialists, auditors, and third-party vendors, you'll play an important role in helping ING maintain a strong risk and control framework.
This is an opportunity to work with modern technologies, engage with global stakeholders, and contribute to meaningful initiatives that strengthen the security and resilience of our organization.
What You'll Do
•Act as a central point of contact for IT risk assessments and control evidence requirements.
•Monitor, track, and manage deviations from established IT risk controls.
•Partner with DevOps squads to implement and demonstrate effective controls.
•Facilitate discussions between first-line and second-line risk teams.
•Conduct walkthroughs and provide support during internal and external audits.
•Support technical due diligence reviews of third-party vendors.
•Define, document, and improve risk processes and control evidence practices.
•Contribute to risk automation and continuous improvement initiatives.
•Communicate risk-related topics clearly to technical and non-technical stakeholders.
•Promote a culture of accountability, security, and risk awareness.
What We're Looking For
Required Skills
•Strong understanding of risk processes within an IT environment.
•Experience working with IT risk standards and control frameworks.
•Ability to communicate and present risk procedures in a clear and convincing manner.
•Proven planning, coordination, and organizational skills.
•Strong written and verbal communication skills in English.
•Experience in IT risk management, cybersecurity, or a related field.
•Knowledge of IT control frameworks and standards such as SOX, GDPR, ISO 2700x, NIST, or similar.
•Experience conducting control assessments, evidence collection, and risk mitigation activities.
Nice to Have
•Project management experience.
•Exposure to third-party risk management, compliance, or IT risk automation initiatives.
•Experience working with DevSecOps teams.
•Knowledge of Agile ways of working.
•Bachelor's degree in an IT-related field.
•Certifications such as CISSP, CISM, CRISC, or equivalent.
What We Offer
•Opportunities to collaborate with global stakeholders across ING.
•A modern technology environment focused on innovation and continuous improvement.
•Exposure to complex risk and security challenges within an international banking organization.
•An Agile workplace where learning, collaboration, and professional growth are encouraged.
•The opportunity to make a meaningful impact on the security and resilience of critical banking services.
About ING
With 65,000 employees and operations in approximately 40 countries, there is no shortage of opportunities for people with initiative who want to help people take a step ahead in life and in business.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot