Experteer Overview
In this role you help protect ING against cyber risks from external suppliers by leading risk-based assessments and onsite reviews of critical providers. You will join a newly established, fast-growing Cybersecurity Hub and influence its direction, capabilities, and culture while collaborating with global teams and senior stakeholders. You’ll address real-world cyber risks across ING’s third‑party ecosystem and contribute to risk management and regulatory objectives. This is a globally oriented, high-impact position for someone who thrives on complex environments and cross-functional influence.

Compensaciones / Beneficios
• Plan and conduct risk-based cybersecurity assessments and onsite inspections of critical third-party providers
• Independently evaluate design and effectiveness of supplier cybersecurity controls
• Assess governance, technology controls, and operational resilience practices
• Perform interviews, document reviews, field inspections, and technical evaluations
• Identify risks, control weaknesses, and vulnerabilities impacting ING
• Translate technical findings into actionable business risk recommendations
• Support security testing activities including penetration testing and red teaming where relevant
• Produce executive-ready reports and dashboards for senior management
• Support Third-Party Risk Management and Operational Resilience objectives under DORA and other frameworks
• Collaborate with integral security, risk, procurement,



architecture, and audit teams
• Contribute to continuous improvement initiatives in Third-Party Cyber Risk Management
• Stay updated on threats, technologies, and best practices
• Travel approximately 6–8 weeks per year

Responsabilidades
• Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, IT Engineering, IT Risk Management, IT Audit, or related disciplines
• 3–6 years of experience in Cybersecurity, IT Audit, Cyber Risk Management, or Third-Party Risk Management
• Strong understanding of cybersecurity technologies and architectures
• Experience assessing IT and cybersecurity controls
• Knowledge of risk management, governance frameworks, and the Three Lines Model
• Familiarity with operating systems, networks, databases, IAM, cloud, web tech, software development practices, or containerization
• Experience performing audits, assessments, supplier reviews, or risk evaluations
• Strong analytical and problem-solving skills
• Ability to communicate complex topics to technical and non-technical audiences
• Excellent stakeholder management and influencing skills
• Fluency in English (written and spoken)
• Ability to work in multicultural, international environments

Requisitos principales
• flexible work model
• restaurant card
• health insurance
• life insurance
• flexible remuneration
• transport allowance

📌 Senior Third-Party Cyber Assurance Expert (Madrid)
🏢 Ing Banking
📍 Madrid