IT OpsRisk Engineer

About the Position

IT OpsRisk Engineer @ ING Hubs Romania

Join ING Hubs Romania as an IT OpsRisk Engineer to manage IT risk assessments, control evidencing, and ensure compliance with industry standards.

Responsibilities

As an OpsRisk Engineer, you will be part of the Financial Markets domain and will help on risk subjects such as:

• Acting as a central SPOC for all incoming IT risk assessments and control evidencing requirements adhering to the established control framework, SOx requirements, and industry best practices.
• Monitoring, tracking, and managing deviations to established IT Risk controls.
• Mediating between 1st LOD/2nd LOD and DevOps teams.
• Conducting walkthroughs with auditors to review and validate IT Risk control processes.
• Leading technical due diligence sessions with third-party vendors.

Your primary mission is to help the squads implement IT Controls and ensure that the controls are implemented effectively.

Requirements

• Experience: Degree and/or experience in IT risk management, cybersecurity, or related field.
• Knowledge: Understanding of fundamental IT risk and security concepts and ability to think critically across technical control domains.
• Skills:
  • Knowledge of IT control frameworks (e.g., SOX, GDPR, CSA CCM) and industry standards (e.g., ISO2700x, NIST).
  • Proven track record of conducting IT control evidencing, qualitative risk assessments, and developing mitigation strategies.
  • Ability to communicate risk-related concepts to technical stakeholders.
  • Experience in liaising with second-line risk functions.
  • Strong written and verbal communication skills in English.
• Certifications: Certifications such as CISSP, CISM, CRISC, or equivalent are a plus.

Nice to Have

• Project management experience.
• Ability to track, plan, and coordinate projects related to third-party risk management, technical compliance, and/or IT risk automation.
• Experience in working with Dev(Sec)Ops teams across vulnerability management, threat hunting, security detection and response, and developing or contributing to information security policies and procedures.
• Knowledge of Agile methodology.

We Offer

• Competitive salary
• Opportunity to work in a highly collaborative and flexible environment
• Professional development opportunities

About the Company

ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of over 1,700 high-performing engineers and risk and operations professionals. We enjoy a flexible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.