Cyber Security Risk Expert

About the Position

Cyber Security Risk Expert @ING Hubs Romania

We are seeking a Cyber Security Risk Expert to join our Non-Financial Risk (NFR) team at ING Hubs Romania. This role is integral to ensuring consistent implementation of NFR frameworks, policies, and procedures, focusing on identifying, managing, and mitigating cyber risks across ING globally.

Responsibilities

• Serve as an experienced expert in identifying, managing, measuring, and mitigating cyber security risks.
• Analyze security events and incidents; conduct forensic investigations following breaches.
• Develop and maintain cybersecurity policies, ensuring they align with regulatory requirements.
• Independently assess cyber risks and monitor ongoing threat intelligence.
• Provide guidance and support to management and the first line of defense on cyber risk matters.
• Utilize strong analytical skills and technical expertise to address complex cybersecurity issues.
• Effectively communicate intricate topics to diverse stakeholders.
• Play a vital role in strengthening ING’s resilience and advancing its strategic risk management initiatives.

Specific Tasks

• Analyze security events, incidents, threats, and malware; conduct forensic investigations after breaches.
• Develop and maintain cybersecurity-related policies, ensuring alignment with external regulations.
• Monitor and challenge the implementation of controls, remediation plans, and risk acceptances.
• Perform independent cyber risk assessments and control effectiveness reviews.
• Review and challenge incident response reports and root cause analyses.
• Monitor threat intelligence and assess its impact on ING’s risk posture.
• Challenge the definition of Key Risk Indicators (KRIs).
• Support NFR teams in deep dives, oversight, and reporting.
• Advise management on cyber risk exposure and mitigation strategies.
• Stay up to date with emerging threats, attacks, regulatory developments, and industry best practices.

Requirements

• Master’s degree in Computer Science or equivalent (Math, Engineering).
• 7+ years of experience in cyber risk management roles, ideally in an IT Security team.
• Strong understanding of cybersecurity, threats, attack methods, and techniques.
• Expertise in data centers, infrastructure, cryptography, cloud, platforms, and business applications.
• Strong skills in Security Detection & Response, Vulnerability Management, Datacenters, and Network.
• Solid expertise in Identity and Access Management, IT Resilience.
• Solid understanding of relevant regulations (e.g., DORA, EBA, MARisk).

We Offer

• Opportunity to work in a highly collaborative and innovative environment.
• Be part of a global team dedicated to enhancing ING’s resilience against cyber threats.
• Professional growth and development opportunities.

About the Company

ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of over 2000 high-performing engineers, risk, and operations professionals. We operate from two locations: Bucharest and Cluj-Napoca.

Our tech capabilities remain the core of our business, with more than 1800 colleagues active in Data and Analytics Tech, Tech Foundation and Channels, Retail Core Banking and Architecture, and Global Products and Technology Services.

We enjoy a flexible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.

For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things and they love doing it in good company. Do you?

Apply now to be part of our mission to safeguard ING’s digital assets and contribute to a safer, more secure future.