Senior Information Risk Specialist @ Hubs Romania

• REQ
• 26/08/2025
• Non Financial Risk
• Boekarest, Roemenië
• ING Hubs

Discover ING Hubs Romania

ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of - , , .

We started out in 2015 as ING's software development hub, then steadily epanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities and : - .

, with more than 1800 colleagues active in Data Management, Touchpoint Channels & Integration, Core Banking, and Global Products.

We enjoy a fleible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.

For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things and they love doing it in good company. Do you?

The Mission

The NFR Specialist IV (Information Risk Management Officer) is a 2nd line of defence (2LoD) independent role, is an epert in Information Risk and Operational Resilience & Business Continuity Management (ORBC) and shall provide epertise review, challenge and advice to ING Hubs Romania.

You will provide epert advice within the organization, on, but not limited to eternal/ internal events, risk identification & assessment, risk mitigation & tracking, risk reporting, you will perform regular review and challenge on IT & ORBC control implementation and ensure monitoring of the related issues.

Your day-to-day

• Participate in and challenge risk assessments (including Business Impact Assessment and IT Asset Risk Assessment);
• Communicate, provide interpretation & training for IT Risk tooling and IT Risk Policies, Minimum Standards, Procedures, Methods and Techniques;
• Perform 2nd line IT Risk and Operational Resilience & Business Continuity Management review and challenge of related controls implementation;
• Perform 2nd line IT Risk monitoring of IT and ORBC issues;
• Participate in, challenge and periodically report upon the risks of key strategic (IT/ ORBC) programs and projects;
• Measure and report on the implementation of Information (Technology) or Continuity Risk frameworks throughout the organization;
  Support the identification of the impact of and the coordination of responses to law and regulatory changes, internal & e- ternal audit reports, etc. and monitoring the follow-up on the regulatory issue solving;
• Be a trusted IRM/ORBC advisor towards 1st line of defense management and other Non-Financial Risk specialists;
• Raise, review & challenge opening or review for closure of risk remediation actions for IT Risk of Continuity Risk gaps identified;
• Participate and contribute to IT controls & ORBC controls deep-dive or thematic reviews;
• Contribute to the development and maintenance of a risk awareness curriculum and training program, and deliver risk awareness trainings to the organization;
• Perform and assist in other information risk activities where the requirements arise.

What we are looking for

• University Degree, preferably IT field;
  5-7 years' e- perience in Information Security/IT Security/Technology Risk/IT Audit;
  Knowledge of and e- perience with IT Risk Assessments, IT Control Assessments or IT Audit assignments;
• Familiarity with Information Security and Technology Risk / Cyber Security Standards and Regulations (such as NIST, COBIT, ITIL);
  E- posure to & understanding technical & business-related threats facing banking industry. Ability to identify and pursue solutions to manage IT risks;
• Collaboration skills and ability to work across both functional and geographical lines;
• Pro-activeness and persuasiveness;
• Ability to demonstrate critical thinking and discuss findings, recommendations with senior management;
• Good analytical skills and sound judgement;
• Fluent in English (written and spoken);

Would be considered a plus

• Having professional education and training in Information Security and Technology Risk (e.g., ISC2, CISSP);
• Knowledgeable of Banking business, processes, procedures and systems and associated laws and regulations.

If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on our website (make sure to scroll until you reach the Data Protection section/ Candidates tab)

Your place of work

Eplore the area

Questions? Just ask

Anamaria Spiridon

Bij ING willen we het beste uit mensen halen. Daarom hebben we een inclusieve cultuur waarin iedereen de kans krijgt om te groeien en een verschil te maken voor onze klanten en de samenleving. Diversiteit, gelijkheid en inclusie staan bij ons altijd voorop. We behan iedereen eerlijk, ongeacht leeftijd, geslacht, genderidentiteit, culturele achtergrond, ervaring, geloof, ras, etniciteit, beperking, gezinssituatie, seksuele geaardheid, sociale afkomst of wat dan ook. Heb je hulp nodig of kunnen we iets voor je doen tijdens je sollicitatie of gesprek? Neem dan contact op met de recruiter die bij de vacature vermeld staat. We werken graag samen met jou om het proces eerlijk en toegankelijk te maken. Lees hier meer over hoe wij staan voor diversiteit, inclusie en erbij horen.