Senior IT Risk Expert en Madrid

This is Us.

A team of more than one thousand people sharing an idea: doing our bit in helping our clients create a better future for themselves, providing them with the tools they need to get where they want to go.
In today’s world, we know this happens because we are a fully online bank. We were born out of that idea and 20 years on, technology, simplicity and transparency continue to be the ingredients of the recipe that leaves the best taste in our mouths: being more than just a bank, someone useful in the lives of the millions of clients who have chosen us.
The way we do things also mirrors our eagerness to innovate. We are proud to be one of the very first banks to work with agile methodologies. It doesn’t ring a bell yet? No worries, we will be delighted to tell you all about it. You will find it’s one of those things you’ll want to repeat over and over.
And although we are based in Spain, we like to cross borders. We are lucky to work with international teams every day across 44 countries, composed of women and men as equal as they are diverse. Because here you are completely free to be who you want to be, love whomever you choose, and even go for pineapple as your pizza topping. 
Making things happen, helping others be successful, always being one step ahead—that’s our DNA. If you look at yourself in the mirror and your reflection matches our way of being and working…we are looking forward to meeting you!

Introduction 
The RegIRM-ES team provides direct Information Risk Management (IRM) and Business Continuity Management (BCM) support to the IRM officers in the countries of the region (currently Spain, Portugal, France, Italy and Czech Republic). RegIRM-ES also supports Corporate IRM (CIRM) in the development and maintenance of the non-financial risk management framework (policy setting and advisory) with a focus on Information (Technology) Risks and Continuity Risks. RegIRM-ES as well focuses on the Information (Technology) Risk and Continuity Risk: 
Information Technology (IT) – concerns managing Information (Technology) Risks within IT Governance, IT Management and IT Security; 
Operational Resilience – concerns measures to ensure Availability of Business Services; 
Information Management – concerns managing Information (Technology) Risks within the lifecycle of information and use of information to the benefit of the stakeholders. 
Continuity Risk is the risk of financial loss, regulatory sanctions or reputational damage due to business disruptions caused by severe events (e.g. natural disasters, infectious diseases, power outages, terrorism). 
In the role of Senior IRM officer, you will hierarchically report to the Head of RegIRM-ES.

Your work environment 
ING is restructuring its IT processes, controls, and infrastructure to transform itself into a Digital Bank with the goal of end-to-end “straight through processing”. Information Risk Management uses sound principles of risk management to ensure that the quality and security aspects of information within the ING Bank are maintained at acceptable levels which are proportionate to its value and criticality. The RegIRM-ES team is currently involved in the program of creating one customer experience for all SW-European ING customers.
The team will perform functional oversight over the IRM and BCM functions regionally and acts as expert center for Information (Technology) and Business Continuity Risk Management. In this position travelling (25 – 40%) is required to give support to ING entities across the region (SW Europe). 

Your profile 
You are an expert in the field of Information (Technology)/Business Continuity Risk Management, possessing in-depth knowledge of IRM and IT processes. 
You have the experience required to coach junior staff. 
You are able to deal with and advise on complex and difficult matters that are a major concern to senior management of ING Bank and its branches. 
You are a trusted senior IRM advisor, who directs, advises and supports the identification, analysis and mitigation by IT / business of risks to ING that result from inadequate security of information (supporting business applications, IT processes, databases and supporting infrastructure), with the aim of assuring reliability of information, integrity and the availability of systems. 
You challenge and monitor IT and Continuity risk management processes and quality. 

Job description 
As Senior IRM officer your role is to: 
Be a trusted IRM advisor towards IT and business management in the countries supported and towards the other non-financial risk specialists; 
Create and publish strategic and ad-hoc risk analyses, risk papers and risk reports with fact finding, research and documenting activities; 
Perform parts of the functional oversight of the regional IRM community by means of QA reviews as part of our functional steering role; 
Participate in, challenge and periodically report upon the risks of key strategic (IT/BCM) programs and projects; 
Participate and challenge in risk assessments on specific Operational Risk or Information Risk projects and programs, taking direction over junior ORM, BCM and IRM colleagues; 
Develop and maintain training modules, and train the IT / business community and your Non-Financial Risk (NFR) colleagues.
Support the Regional Head of IRM and BCM (RegIRM-ES) with research, fact finding, collecting evidence and documenting activities; 
Support the Regional Head of IRM and BCM (RegIRM-ES) in the reporting on IT and Continuity Risk
Contribute to the development and maintenance of Corporate ING IRM Strategy, Framework, Policies, Minimum Standards, Procedures, Methods and Techniques; 
Identify external / internal developments, initiatives and threats. Translate these pro-actively in IRM Vision, Mission and Strategy of ING Bank and its branches; 
Contribute to the identification of the impact of and the coordination of responses to law and regulatory changes, ECB reports, etc. and monitors the follow-up of the regulatory issue solving. 

Required Skills: 
Experience as senior IRM with at approx. 8 years in risk areas that are relevant for respectively Information (Technology) Risk and Business Continuity Risk Management 
Track record as IRM or IT (Security) expert 
Good knowledge of Banking business, processes, procedures and systems. 
Collaboration skills and ability to work across both functional and geographical lines 
Ability to earn trust and respect of clients, colleagues and senior management 
Ability to be firm when needed and show flexibility when possible 
Excellent analytical skills and sound judgment 
University Degree or equivalent 
Professional education and multiple international certifications for Information (Technology) and Business Continuity Risk Management (e.g. RE, BCI, ISC2, ISACA accreditations) 
Fluent in English (written and spoken)
The ability to read/speak other languages used in the region is much appreciated.

What do we offer?

Flexible schedule. 
What goes on at ING matters much to us. 
But we know that the most important things are outside the office.

Free meals.
So that thinking about what to have for lunch doesn’t take up your time or your cravings.  

Life and health insurance. 
For you and all your family (spouse/partner and children).

Free company shuttle. 
We take you from Madrid city center to our offices at Las Rozas (and back!)

Banking benefits.
Special loan or mortgage terms after 6 months working at the bank.
And benefit from our pension plan after 2 years with us.

More health, more sports.
Paddle tennis court and lessons available to you
Runners club with your own trainer
Clinics with professional, world-class athletes
Physiotherapy service on site