Business Control Specialist (IT risk) in Amsterdam

Are you our new Business Control Specialist with a passion for IT risk?

ING Bank NL, Tech Domain Customer Data is looking for an enthusiastic, passionate and inspiring Business Control Specialist (1st Line of Defence), with a solid engineering and security background and hands on mentality.

The role

As a Business Control Specialist, you enable the DevOps teams in creating and maintaining secure and compliant applications and infrastructure. You will support various DevOps teams in making/ updating risk assessments, Operational Security Baselines and review the evidence delivered by the teams against the ING IT Security standards and criteria. Helping others to be successful is one of your core qualities

Your added value lies in your critical attitude and how you challenge the teams and take them with you on the journey to make and keep their applications compliant and safe. 

You support management of Customer Data by reporting the compliance state of the Business applications, perform trend analyses and advice in estimating the risks and prioritize the work.

In this function you have a close relation with 2nd line Risk and CISO.

Your responsibilities

• Don’t take things for granted!!!
• Challenge and motivate teams on Risk and security
• Quality checks on ITRMP evidence delivered by the teams
• Review (incl. approve/decline) the Operational Security Baseline delivered by the teams
• Lead Risk sessions and meetings for the tribe and participate in Business Impact Analysis (BIA), Detailed Risk Assessment (DRA)
• Advise/inform product teams (squads) according to the Information Risk Minimum Standard
• Keep the Risk Journeys (documentation and instructions for engineers) up to date
• Support teams in using tooling used within ING (such as Amyna, SDT, ITRMP, etc.)
• Assist and advice teams and management in CAS Issues (audit), Risk Events, Risk Acceptances, Management Identified Actions
• Monitor and follow up on I-risk items
• Be the contact person for 2nd Line of Defense
• Participate in one of the IT Risk area team (e.g. Platform guild, IAM guild, etc.).
• Participate in the monthly Risk Evaluation Meeting (REM)
• Support the tribe in creating and maintaining Business Continuity Plan (BCP)

Our expectations

• A proven track record and proficiency in IT Risk (5 + years), containing but not limiting to:
  o            Change Management
  o            Identity and Access Management
  o            Operational Resilience
  o            Platform Security
  o            Cyber Security (CISSP, CISM or CISA or other IT risk related certifications holder is desirable)
• Analytical, precise, tenacious, autonomous
• Strong social and communication skills. Being a sparring partner for our business colleagues
• Fluent English speaking and writing

Rewards & benefits

We want to make sure that it’s possible for you to strike the right balance between your career and your private life. You can find out more about our employment conditions at https://www.ing.jobs/netherlands/Why-ING/benefits.htm

The benefits of working with us at ING include:

• A salary tailored to your qualities and experience

• 24-27 vacation days depending on contract

• Pension scheme

• 13th month salary

• Individual Savings Contribution (BIS), 3.5% of your gross annual salary

• 8% Holiday payment

• Personal growth and challenging work with endless possibilities

• An informal working environment with innovative colleagues

• Work Agile, so new ideas come to life faster

About us

With 57,000 employees and operations in approximately 40 countries, there is no shortage of opportunities for people with initiative who want to help people take a step ahead in life and in business. Do you want to work at the cutting edge of what’s possible and at the same time ensure you work with integrity and hold the customer’s interests at heart? Do you want to be surrounded by progressive, inspiring, diverse and supportive colleagues? Then there is no better place to invest your talents than at ING. Join us. Apply today.