Want to know if this job is worth applying to?
București, România
Hybrid
ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of over 2000 high-performing engineers, risk, and operations professionals.
We started out in 2015 as ING’s software development hub, then steadily expanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities and operates from Bucharest.
Our tech capabilities remain the core of our business, with more than 1800 colleagues active in Data and Analytics Tech, Tech Foundation and Channels, Retail Core Banking and Architecture, and Global Products and Technology Services.
We enjoy a flexible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.
For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things and they love doing it in good company. Do you?
The Mission
The NFR Hubs Romania team is an integral part of ING’s Non-Financial Risk domain. The team is responsible for ensuring consistent implementation of NFR frameworks, policies, and procedures, while fostering a collaborative and high-performing environment within the hubs.
The Data Risk NFR Expert is part of the Center of Expertise (CoE) Data Management Risk team within the Non-Financial Risk (NFR) domain. This team focuses on identifying, managing, and mitigating risks related to data governance, data risk, data quality, data integrity, and data privacy, guiding policy setting and RAS metrics for data-related risks, supporting ING’s global risk management objectives.
The role will report hierarchically to the Lead of Information & Technology Risk in Hubs Romania and functionally to Global Lead of ITR Team II located in Amsterdam, The Netherlands.
Your day to day
Actively identifies, measures, and mitigates risks related to data management and associated technologies;
Analyzing events and incidents to uncover structural weaknesses in data management practices and IT assets;
Leads the development of data management related policies, ensuring compliance with external regulations;
Monitoring and challenging the implementation of controls, remediation plans, and risk acceptances;
Performing independent risk assessments and control effectiveness reviews.
Reviewing incident response reports and root cause analyses;
Challenging the definition and periodic reporting of Key Risk Indicators (KRIs);
Supporting NFR teams in data risk related deep dives, oversight, and reporting;
Advising senior management on Data Management related risks and mitigation strategies;
Staying up to date with data risk related and regulatory developments as well as industry best practices.
Specific Tasks
Leading analysis of data management events and incidents;
Overseeing policy development and regulatory alignment;
Developing and monitoring risk controls and remediation plans;
Creating independent risk assessments and control reviews;
Reviewing incident response and root cause analysis reports;
Challenging and refining Key Risk Indicators;
Supporting NFR teams in oversight and reporting;
Advising senior management and 1LoD teams on risk mitigation.
What you’ll bring to the team
The ideal candidate is a seasoned risk professional with strong analytical, communication, and stakeholder management skills. You have deep expertise in non-financial risk and more specific data management risk related topics. You are decisive and delivery-focused, with a proven track record of getting things done — not just designing solutions, but also executing them, often with limited resources. You take ownership, work independently, and are comfortable driving work forward without needing detailed direction.
University/Post Graduate (Master’s) Degree;
5+ years’ experience in data management risk roles, ideally within CDO, CISO or 2LoD departments;
Solid knowledge of data management frameworks, methods, and data protection;
Strong expertise in data management technologies, platforms, and tools;
Solid understanding of relevant regulations (e.g. BCBS239, GDPR);
Ability to work across geographies.
If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on our website (make sure to scroll until you reach the Data Protection section/Candidates tab).