IT Risk Engineer

About ING

Our purpose is to empower people to stay a step ahead in life and in business. We are an industry recognized strong brand with positive recognition from customers in many countries, strong financial position, Omni-channel distribution strategy and international network.

About IT Risk within WB Tech/CPS/IT Risk & Cybersec

You will be part of an IT tribe where there are around 350 IT Engineers active in around 50 DevOps teams, located in India, Netherlands, Philippines and Romania. We develop, implement and maintain approximately 70 applications, which are all high risk, SoX-critical of critical applications for ING. The IT Risk team assists IT Custodians in managing the IT Risk profile and take actions to reduce actual risks. You will be assisting the implementation of the IT Controls as much as we can to support the IT Custodian and DevOps teams to Tell, Guide and Prove the correctness. Main challenge is how to prove these controls are implemented effective. It is a cumbersome process of implementing IT Controls, delivering the evidence, testing the effectiveness of these implementations by the 1st line, 2nd line and 3rd party auditors.

Your work environment

You are an energetic IT Engineer with a passion for IT Risk and security and a positive can-do mind-set. You are a team player working as a core member of a multidisciplinary and cross-functional squad, a selfmanaging and autonomous unit. Close collaboration within and across the squads and with the stakeholders is of utmost importance for you.

Tasks and responsibilities

To deliver, maintain and keep IT Risk in control on the IT-applications and –services in order to realize the ING strategy in the field of information technology. Risk Engineers in this job category work in an agile way and in small teams to manage risk and in control at all the time.

The following items are vital in this:

1. Contribute to the new way of working

• In the Tribe structure, you are part of an ambitious and highly motivated squad with an Agile way of working. You work together with colleagues from other areas of expertise and take initiative in expanding knowledge (both within and outside of your area of expertise) that is relevant for the Tribes in which you work.

• Where possible, you take on tasks/activities that contribute to the mission, even when they are not entirely within your area of expertise.

2. Profile

• Depending on the maturity (Dreyfuss-) level, x-years’ experience in IT. Experience in IT Risk, IT security and GDPR is preferred.

• Eager and willing to learn. Ability to make the risk processes lean and first time right

• Hands-on, pro-active advise, deliver solutions and answers, explain weaknesses and find solutions to overcome them

• Being able to overcome resistance, being able to convince.

• Being able to work in short sprints, work closely with diverse teams and diverse stakeholders

• Preferably experience with Agile working

• Fluent in English (spoken and written) is mandatory.

3. Contribute to team and personal development

• You contribute to the development of your squad by actively giving and receiving feedback.

• Depending on maturity: As an experienced Risk Engineer, you coach less experienced colleagues and see to their training.

• You are responsible for developing your own expertise and its application. You know where to acquire this knowledge, and you actively request help from your IT Chapter Lead in your personal development.

• Ability to liaise and coordinate, knowledge sharing with offshore and on site devops team.

4. Behavior and competencies

• You are inspiring and exude energy and passion.

• You have a keen IT market focus: you are passionate about major trends in the new way of working, including Lean IT, continuous delivery, cloud processes, etc.

• You are focused on collaboration: you set aside your own 'ego' in the interests of achieving the best results – you help others achieve success.

• You achieve optimum results by empowering teams and giving them responsibility, at the same time 'provoking' them, challenging them and keeping them 'on the ball'.

• You encourage people to achieve real personal development. z

• You have the capacity to learn new content quickly and transfer it.

• You actively seek help and feedback, but are also not afraid to give feedback.

• You are curious and always look out for innovation opportunities in your focus area.

• You have a mindset that focusses on continuous improvement.

5. Desired skills and experience as an IT Risk Engineer

As an IT Risk Engineer you work at a bank that is known for its IT innovations. As an Engineer you have (depending on # years’ experience/maturity):

• Proven track record in this role, preferably in an international environment

• Good knowledge of Risk identification and mitigation methodologies.

• Strong fundamentals in all eight domains of IT Risk

• Willingness and ability to automate to the bone and master new technologies

• Experience in Scrum, Agile and Continuous Delivery

• Able to work under pressure, no 9-5 mentality

• Great communication skills, verbal as well as written.