Experteer Overview In this role you help protect ING against cyber risks from external suppliers by leading risk-based assessments and onsite reviews of critical providers. You will join a newly established, fast-growing Cybersecurity Hub and influence its direction, capabilities, and culture while collaborating with general teams and senior stakeholders. You’ll address real-world cyber risks across ING’s third‑party ecosystem and contribute to risk management and regulatory objectives. This is a globally oriented, high-impact position for someone who thrives on complex environments and cross-functional influence.Compensaciones / Beneficios
- Plan and conduct risk-based cybersecurity assessments and onsite inspections of critical third-party providers
- Independently evaluate design and effectiveness of supplier cybersecurity controls
- Assess governance, technology controls, and operational resilience practices
- Perform interviews, document reviews, field inspections, and technical evaluations
- Identify risks, control weaknesses, and vulnerabilities impacting ING
- Translate technical findings into actionable business risk recommendations
- Support security testing activities including penetration testing and red teaming where relevant
- Produce executive-ready reports and dashboards for senior management
- Support Third-Party Risk Management and Operational Resilience objectives under DORA and other frameworks
- Collaborate with global security, risk, procurement,



architecture, and audit teams
- Contribute to continuous improvement initiatives in Third-Party Cyber Risk Management
- Stay updated on threats, technologies, and best practices
- Travel approximately 6–8 weeks per yearResponsabilidades
- Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, IT Engineering, IT Risk Management, IT Audit, or related disciplines
- 3–6 years of experience in Cybersecurity, IT Audit, Cyber Risk Management, or Third-Party Risk Management
- Strong understanding of cybersecurity technologies and architectures
- Experience assessing IT and cybersecurity controls
- Knowledge of risk management, governance frameworks, and the Three Lines Model
- Familiarity with operating systems, networks, databases, IAM, cloud, web tech, software development practices, or containerization
- Experience performing audits, assessments, supplier reviews, or risk evaluations
- Strong analytical and problem-solving skills
- Ability to communicate complex topics to technical and non-technical audiences
- Excellent stakeholder management and influencing skills
- Fluency in English (written and spoken)
- Ability to work in multicultural, international environmentsRequisitos principales
- flexible work model
- restaurant card
- health insurance
- life insurance
- flexible remuneration
- transport allowance

📌 Senior Third-Party Cyber Assurance Expert (Madrid)
🏢 Ing Banking
📍 Madrid