Experteer Overview

Por favor, presente su candidatura sin demora si su perfil encaja bien con este puesto, debido al alto nivel de interés.
In this role you help protect ING against cyber risks from external suppliers by leading risk-based assessments and onsite reviews of critical providers. You will join a newly established, fast-growing Cybersecurity Hub and influence its direction, capabilities, and culture while collaborating with global teams and senior stakeholders. You’ll address real-world cyber risks across ING’s third‑party ecosystem and contribute to risk management and regulatory objectives. This is a globally oriented, high-impact position for someone who thrives on complex environments and cross-functional influence.

Compensaciones / Beneficios
• Plan and conduct risk-based cybersecurity assessments and onsite inspections of critical third-party providers
• Independently evaluate design and effectiveness of supplier cybersecurity controls
• Assess governance, technology controls, and operational resilience practices
• Perform interviews, document reviews, field inspections, and technical evaluations
• Identify risks, control weaknesses, and vulnerabilities impacting ING
• Translate technical findings into actionable business risk recommendations
• Support security testing activities including penetration testing and red teaming where relevant
• Produce executive-ready reports and dashboards for senior management
• Support Third-Party Risk Management and Operational Resilience objectives under DORA and other frameworks




• Collaborate with general security, risk, procurement, architecture, and audit teams
• Contribute to continuous improvement initiatives in Third-Party Cyber Risk Management
• Stay updated on threats, technologies, and best practices
• Travel approximately 6–8 weeks per year

Responsabilidades
• Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, IT Engineering, IT Risk Management, IT Audit, or related disciplines
• 3–6 years of experience in Cybersecurity, IT Audit, Cyber Risk Management, or Third-Party Risk Management
• Strong understanding of cybersecurity technologies and architectures
• Experience assessing IT and cybersecurity controls
• Knowledge of risk management, governance xqbhyrx frameworks, and the Three Lines Model
• Familiarity with operating systems, networks, databases, IAM, cloud, web tech, software development practices, or containerization
• Experience performing audits, assessments, supplier reviews, or risk evaluations
• Strong analytical and problem-solving skills
• Ability to communicate complex topics to technical and non-technical audiences
• Excellent stakeholder management and influencing skills
• Fluency in English (written and spoken)
• Ability to work in multicultural, international environments

Requisitos principales
• flexible work model
• restaurant card
• health insurance
• life insurance
• flexible remuneration
• transport allowance

📌 Senior Third-Party Cyber Assurance Expert (Madrid)
🏢 Ing Banking
📍 Madrid