At ING Hubs Spain we are looking for a IT Risk ExpertYour role and work environment:We are looking for a talented and enthusiastic IT Risk Expert (second line of defense role) to join our ING Hubs Spain Team.As an IT Risk Expert, you will sit at the intersection of technology, regulation, and business strategy – helping ING manage information and technology risks at scale across multiple countries.

This is not a checkbox compliance role.

You will advise senior stakeholders, shape risk decisions, and influence how technology risk is managed across ING.Your Impact:You will be part of international Information Risk Management (IRM) team, supporting ING entities across Europe (including Netherlands, Belgium, France, Italy, UK, and WB) and the Global Information & Technology Risk department.

Your work directly strengthens ING's resilience, security posture and regulatory readiness.You will:Act as a trusted IT Risk advisor to IT leaders and business managementTranslate complex technology risks into clear, actionable insights for decision-makersInfluence how ING designs and operates its Information & Technology Risk frameworkYour Key Responsibilities:Provide hands?on Information Risk Management (IRM) support to local and global IRM officers and IT stakeholdersPerform risk analyses, risk papers, and executive?level reporting (strategic and ad?hoc)Challenge, review, and improve risk controls through QA reviews and oversight activitiesParticipate in, challenge,



and periodically report upon the IT risks of key strategic ING programs and projectsMonitor external/internal developments (regulatory, technological, threat landscape), assess their impact on ING and translate these pro?actively into IRM mission, vision and strategySupport the IRM Leadership (Local, General and Hubs Leads) with research, fact finding, collecting evidence and risk assessmentsContribute to the development and maintenance of ITR frameworks, standards, procedures, and methodologiesSupport regulatory interactions and follow?ups (e.G ECB, audits, regulatory change initiatives)Help design and deliver training and awareness for Non?Financial Risk colleaguesWhat are we looking for?

We are looking for someone who is confident, analytical, and comfortable challenging the status quo.You likely have:Solid experience in Information/IT Risk Management/Cyber Security, IT Governance, or Technology RiskDeep understanding of IT security, risk management processes, Availability, Integrity, and Confidentiality of information and systemsExperience advising stakeholders on complex risk topicsStrong analytical and writing skills – you can turn complexity into clarityKnowledge of GRC frameworks and compliance standards (ISO/IEC *****, NIST CSF, NIS2, SOC 1?2)A proactive mindset: you don't just identify risks; you help solve themThe confidence to challenge risk decisions constructively - You are able to deal with and advise on complex and difficult matters that are a major concern to senior management of ING

📌 IT Cybersecurity Specialist (Madrid)
🏢 Ing
📍 Madrid