Job Overview

You will be part of an IT Tribe called Financial Crime & Fraud Prevention (FC&FP) with employees located in Netherlands, India and Philippines. We support the different areas under this tribe and ensure that the IT Risk controls are implemented effectively in accordance to our risk policies and give guidance to the teams to provide pieces of evidence to evaluate its effectiveness.

• You will lead and manage a team of risk officers supporting FC&FP under the Shared Tech department
• You will collaborate with other IT auditor teams to ensure the safety of our IT systems and its customers.
• You are a servant leader who is up for the challenge of delivering services with high quality, and at the same time able to implement or adapt to necessary changes to stay relevant
• You evaluate and assess employee performance, and contribute to the development of your squad by actively giving and receiving feedback
• You coach less experienced colleagues and see to their training and development plan

Key Responsibilities

• Lead a team of risk officers responsible for interpreting ING’s IT risk policies and IT minimum standards within FC&FP
• Set team objectives and conduct performance evaluations. Takes appropriate corrective action as needed to promote optimal employee performance
• Mentor and coach team members in accordance to their planned growth
• Develop and mature the team’s internal processes and way of testing in alignment with ING’s agile way of working
• Create high-performing teams and remove impediments; stimulate interaction between people within and outside your domain
• Ensures that the risk and compliance policies are applied into practice by the different IT areas supported.
• Demonstrate effectiveness of risk mitigation via Test of Design (ToD) and Test of Operational Effectiveness (ToE) for IT systems and internal IT processes.
• Implement and maintain IT controls from policies, including testing activities.
• Pro-actively provide advice & guidance to IT areas on continuous enhancement of the IT control environment and operational processes.
• Help set standards in the field of expertise and develop, innovate, and encourage knowledge sharing, at the same time continuously raise awareness on IT risk-related topics within the IT community.
• Manage stakeholder relationships, collaborate and interface with Information & Operational Risk, Audit, and Security departments.
• Prepare and provide written risk reports, assessments and presentations on related matters within this role’s scope.

Key Capabilities/Experience

• You have an experience with people management – developing high-performing teams and empowering teams to act autonomously and holding them accountable
• You have an understanding of core IT policies and procedures and are able help the business with implementing the controls.
• You are comfortable working in a dynamic environment with different nationalities and disciplines. You have IT risk management, IT audit, regulatory risk management and your analytical skills and sound judgement are well developed.
• You have the ability to liaise with a broad range of people, including stakeholder management, line management, senior management, and external suppliers.
• You are hands-on; able to give pro-active advise, deliver solutions and answers, explain weaknesses and find solutions to overcome them
• You are focused on collaboration: you set aside your own 'ego' in the interests of achieving the best results – you help others achieve success
• You achieve optimum results by empowering teams and giving them responsibility, at the same time challenging them

Minimum Qualifications

• Graduate of any BS Degree in any computer science/IT related course, accountancy, or business management
• A minimum of 5 or more years of experience as a Senior Risk Officer, IT Auditor or in Information Technology Risk Management
• Exposure to IT Governance and its activities
• Knowledgeable on Identity Assess Management and Change Management
• Capable in doing risk and control self-assessment
• You have an understanding of core IT policies and procedures and are able help the business with implementing the controls
• Strong communication skills, verbal and written
• You take responsibility to get the work done