Cyber Security Risk Expert @ING Hubs Romania

• Serve as an experienced expert in identifying, managing, measuring, and mitigating cyber security risks; 

• Analyze security events and incidents; conduct forensic investigations following breaches; 

• Develop and maintain cybersecurity policies, ensuring they align with regulatory requirements; 

• Independently assess cyber risks and monitor ongoing threat intelligence; 

• Provide guidance and support to management and the first line of defense on cyber risk matters; 

• Utilize strong analytical skills and technical expertise to address complex cyber security issues; 

• Effectively communicate intricate topics to diverse stakeholders; 

• Play a vital role in strengthening ING’s resilience and advancing its strategic risk management initiatives. 

Specific Tasks  

• Analyze security events, incidents, threats, and malware; conduct forensic investigations after breaches; 

• Develop and maintain cybersecurity-related policies, ensuring alignment with external regulations; 

• Monitor and challenge the implementation of controls, remediation plans, and risk acceptances; 

• Perform independent cyber risk assessments and control effectiveness reviews; 

• Review and challenge incident response reports and root cause analyses; 

• Monitor threat intelligence and assess its impact on ING’s risk posture; 

• Challenge the definition of Key Risk Indicators (KRIs); 

• Support NFR teams in deep dives, oversight, and reporting; 

• Advise management on cyber risk exposure and mitigation strategies; 

• Stay up to date with emerging threats, attacks, regulatory developments, and industry best practices. 

What you’ll bring to the team 

• Master’s degree in Computer Science or equivalent (Math, Engineering); 

• 7+ years of experience in cyber risk management roles, ideally in an IT Security (eg. CISO) team; 

• Strong understanding of cybersecurity, threats, attack methods, and techniques; 

• Expertise in data centers, infrastructure, cryptography, cloud, platforms, and business applications; 

• Strong skills in Security Detection & Response, Vulnerability Management, Datacenters, and Network; 

• Solid expertise in Identity and Access Management, IT Resilience; 

• Solid understanding of relevant regulations (e.g., DORA, EBA, MARisk).

If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on our website (make sure to scroll until you reach the Data Protection section/Candidates tab).