ppAt ING Hubs Spain we are looking for a Senior Third-Party Cyber Assurance Expert /ph3Your role and work environment: /h3pAt ING Hubs Spain, we are building a new Cybersecurity organization from the ground up. /ppThis is a unique opportunity to join a recently established and fast-growing international Hub, where you will not only contribute to Third-Party Cyber Risk Management activities but also help shape the future capabilities, processes, and culture of the team. /ppAs a Senior Third-Party Cyber Assurance Expert , you will play a key role in protecting ING against cyber risks arising from external suppliers and service providers that support critical business operations across the bank. /ppThis role combines cybersecurity, risk management, technical assessments, supplier assurance, stakeholder management, and international exposure. You will work closely with general CISO teams, suppliers, risk professionals, and senior stakeholders to independently assess cybersecurity risks and drive improvements across ING's third-party ecosystem. /ppIf you are motivated by investigating complex environments, challenging the status quo, identifying cybersecurity risks, and influencing meaningful improvements, this role offers a unique opportunity to make a global impact. /ph3Why is this role exciting? /h3h3In this role, you will: /h3ulliAssess the cybersecurity posture of critical suppliers supporting ING globally /liliWork on real-world cybersecurity risks affecting critical business services /liliPerform independent cybersecurity assessments and onsite inspections worldwide /liliCollaborate with technical experts, suppliers, security teams, auditors, and senior stakeholders /liliContribute to ING's Third-Party Risk Management, Operational Resilience,



and DORA objectives /liliGain international exposure through assessments of providers across different countries and industries /liliDevelop expertise across multiple technologies, cloud environments, cybersecurity domains, and regulatory frameworks /liliJoin a growing Cybersecurity Hub and help shape its future direction /li /ulh3Your key responsibilities: /h3h3As a Senior Third-Party Cyber Assurance Expert, you will: /h3ulliPlan, organize, and execute risk-based cybersecurity assessments and onsite inspections of ING's critical third-party providers. /liliIndependently evaluate the design and effectiveness of cybersecurity controls implemented by suppliers. /liliAssess security governance, technology controls, operational resilience capabilities, and risk management practices. /liliConduct interviews, documentation reviews, field inspections, configuration assessments, and technical security evaluations. /liliIdentify cybersecurity risks, control weaknesses, and potential vulnerabilities impacting ING. /liliAnalyze findings and translate technical gaps into clear business risks and actionable recommendations. /liliSupport the execution and evaluation of security testing activities, including penetration testing and red teaming results where applicable. /liliProduce professional reports and executive-ready dashboards for senior management. /liliSupport ING's Third-Party Risk Management and Operational Resilience objectives under DORA and other regulatory frameworks. /liliCollaborate with global security, risk, procurement, architecture and audit teams. /liliContribute to continuous improvement initiatives within Third-Party Cyber Risk Management.



/liliStay current on emerging threats, technologies, industry trends and cybersecurity best practices. /li /ulpTravel may be required as part of certain assessments, with an estimated travel requirement of approximately 6 to 8 weeks per year. /ph3What are we looking for? /h3pWe are looking for cybersecurity professionals who combine strong technical knowledge, risk awareness, critical thinking, and excellent communication skills. /ph3Required qualifications /h3ulliBachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, IT Engineering, IT Risk Management, IT Audit, or related disciplines. /lili3-6 years of professional experience in Cybersecurity, IT Audit, Cyber Risk Management, Third-Party Risk Management, Information Security, or similar fields. /liliStrong understanding of cybersecurity technologies and architectures. /liliExperience assessing and evaluating IT and cybersecurity controls. /liliGood understanding of risk management, governance frameworks, and the Three Lines Model. /liliFamiliarity with operating systems, networks, databases, identity and access management, cloud technologies, web technologies, software development practices, or containerization technologies. /liliExperience performing audits, cybersecurity assessments, supplier reviews, or risk evaluations. /liliStrong analytical and problem-solving skills. /liliAbility to communicate complex technical topics to technical and non-technical audiences. /liliExcellent stakeholder management and influencing skills. /liliFluency in English, both written and spoken. /liliAbility to work effectively in multicultural and international environments. /li /ulh3You’ll get extra points for /h3ulliExperience within the banking or financial services sector. /liliExperie /li /ul /p #J-18808-Ljbffr

📌 Senior Third-Party Cyber Assurance Expert (Madrid)
🏢 PVH (Tommy Hilfiger/Calvin Klein)
📍 Madrid