IT Risk Expert

The NFR Global Business and Support team is part of the CRO / NFR domain, focusing on second line oversight of global business lines and support functions from an NFR perspective. Professionals in this team ensure consistent implementation of the NFR framework and policies across Operational Risk and IT Risk across multiple business areas. Their work directly impacts ING’s ability to manage IT risks globally, supports strategic initiatives, and is crucial in identifying actionable insights and supporting ING’s broader risk management goals.

Specific Function

The IT Risk Expert leads on the second line challenge to first line stakeholders, predominantly in the IT domain. The role supports the Head of NFR Global Business & Support in overseeing the implementation of the NFR framework across all global domains of ING (WB, GT, BSF etc), by ensuring that all global business lines and support functions have fully implemented the NFR Framework, especially in complex initiatives such as MBB-led projects. The role serves a portfolio of first line functions, collaborating closely with IT Risk and Operational Risk counterparts to drive excellence in IT risk management and resilience.

Job Description

The IT Risk Expert is responsible for providing credible, risk-based second line challenge on key IT risk topics and IT resilience. You will assure the rollout and challenge the effectiveness of IT risk policies and procedures, improve data quality, and challenge first line to create actionable paths to green for IT Risk opinions and KRIs. You will also enhance the NFR function’s influence by building strong relationships, contributing to strategic risk discussions, and driving a learning organization through sharing insights and challenging IT functions to improve risk ownership.

• Ensuring consistent and complete implementation of the NFR Framework, including integration into major initiatives.
• Providing credible, risk-based challenge on key IT risk topics, including emerging risks, incidents, resilience, and major projects.
• Proactively steering the second line challenge to the areas of highest risk and adapting the second line position to the changing business environment.
• Collaborating with IT Risk colleagues, Operational Risk colleagues, and other NFR teams to strengthen risk alignment and influence in the in-scope first line domains.
• Driving a learning organization by sharing insights and challenging IT functions to improve risk ownership.

Specific Tasks and Responsibilities

• Leading second line challenge and oversight for IT risk across global business lines, steering the first line organization and IT Risk SME to deal with the biggest risks facing ING.
• Overseeing the roll-out and challenge of IT risk policies and procedures.
• Developing and maintaining second line risk opinions, challenging first line to build and maintain holistic paths to green.
• Participating in strategic steering groups and cross-functional initiatives.
• Building strong relationships with stakeholders and contributing to strategic risk discussions.
• Driving improvements in data quality and risk reporting.
• Collaborating with other NFR teams and Operational Risk Management (ORM) colleagues.
• Guiding junior IT Risk resources in developing their challenge capabilities.

Specific Knowledge and Experience

• University degree or equivalent.
• Minimum 12 years proven leadership experience in IT risk management and project-related roles.
• Broad product expertise in complex financial services IT asset stacks and related governance, including one or more global business lines of ING.
• Experience influencing change and building stakeholder relationships.
• Strong background in operational or IT risk oversight.
• Familiarity with ING NV’s regulatory environment, especially IT risk.
• Track record of driving business change through persuasion and embedding frameworks.
• Strategic and critical thinking, stakeholder management, excellent communication, analytical mindset, sound judgment, and decision-making skills.

Reporting Line and Classification

IT Risk Expert reports hierarchically to the lead Global Business & Support located in Amsterdam.

Rewards and benefits

We want to make sure that it’s possible for you to strike the right balance between your career and your private life.

The benefits of working with us at ING include:

• 25-28 vacation days depending on contract.
• Pension scheme.
• 13th month salary.
• 8% Holiday payment.
• Hybrid working.
• Personal growth and challenging work with endless possibilities.
• An informal working environment with innovative colleagues.