IT OpsRisk Engineer @ING Hubs Romania

Discover ING Hubs RomaniaING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of over 2000 high-performing engineers, risk and operations professionals.We started out in 2015 as ING’s software development hub, then steadily expanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities and operate from two locations: Bucharest and Cluj-Napoca. Our tech capabilities remain the core of our business, with more than 1800 colleagues active in Data Management, Touchpoint Channels & Integration, Core Banking, and Global Products.We enjoy a flexible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things and they love doing it in good company. Do you?Your missionAs an OpsRisk Engineer will be part of the Financial Markets domain.You will help on risk subjects like:Act as a central SPOC for all incoming IT risk assessments and control evidencing requirements adhering the established control framework, SOx requirements and industry best practices.Monitoring, tracking and managing deviations to established IT Risk controls.Mediating between 1st LOD/2nd LOD and DevOps teams.Conducting walkthroughs with auditors to review and validate IT Risk control processes.Lead technical due diligence sessions with third party vendors.You will work in an AGILE environment, following SCRUM methodology together with DevOps squads, helping to maintain a safe and secure application.Your Day to DayYour primary mission is to help the squads to implement IT Controls and to prove the controls are implemented effectively:ensure we are in control of our risk appetitedefine and document adequate risk processes and collect the evidences in regards; make sure that the different risk parties agree with the evidencesresponsible for creating documents and project management requirements or specificationsprovide documentation support to the technical team; interface with developers and operation engineers to define the specificationsliaison between the team and other IT Risk professionalsunderstand the need for security and apply it using the existing framework; constant communication about changesparticipate in automation program for process and evidence for IT riskshow proactivity and flexibility, come up with plans of action and adapt approaches if necessaryunderstand the corporate climate and culture and act as an ambassador; IT custodianship/asset owner role.What you’ll bring to the teamExperience:Degree and/or experience in IT risk management, cybersecurity, or related field.Understanding of fundamental IT risk and security concepts and ability to think critically across technical control domains.Knowledge of IT control frameworks (eg. SOX, GDPR, CSA CCM) and industry standards (eg. ISO2700x, NIST).Proven track record of conducting IT control evidencing, qualitative risk assessments and developing mitigation strategies.Risk reporting and communication:ability to communicate risk-related concepts to technical stakeholders.experience in liaising with second line risk functions.strong written and verbal communications skills in English.Certifications such as CISSP, CISM, CRISC or equivalent are a plus.Knowledge:Mandatory:Ability to understand the risk processes in an IT environmentExperience with IT risk standardsAbility to make clear and convincing statements related to risk procedures Proven planning and organizing experienceNice to have:Project management experienceAbility to track, plan and coordinate projects related to third party risk management, technical compliance, and/or IT risk automationExperience in working with Dev(Sec)Ops teams across vulnerability management, threat hunting, security detection and response and developing, or contributing to information security policies and proceduresKnowledge of Agile methodologyForeign languages: English (advanced)Education: nice to have Bachelor’s Degree (or higher) in an IT related field.If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on our website (make sure to scroll until you reach the Data Protection section/ Candidates tab).