Technology | Wholesale Banking CISO / ISM | Associate, Information Security Engineer | New York

About ING: 

In the Americas, ING’s Wholesale Banking division offers a broad range of innovative financial products and services to domestic and international corporate and institutional clients. 

 
When you come to work at ING, you’re joining a team where individuality isn’t just accepted, it’s encouraged. We’ve built a culture that’s fun, friendly and supportive – it’s the kind of place where you can be yourself and make the most of whatever you have to offer.

We give people the freedom to take risks, think differently, take ownership of their work, and make great things happen. We’re here to help you get ahead. And with our global network, there’s plenty of scope to take your career in new directions, perhaps even ones you’ve never considered. ING Americas follows a hybrid work model, allowing for in-office / work from home flexibility. Hybrid work arrangements vary based on business area.

Sound like the kind of place you’d feel at home? We’d love to hear from you.

About the position:

The Information Security Governance Expert is responsible for overseeing day-to-day operations of Identity Access Management, Cyber risk management, IT Controls compliance, and control effectiveness across the organization. The role ensures that information security risks are identified, assessed, monitored, and reported while supporting adherence to ING policies, regulatory requirements, and industry standards.

About the department:

Wholesale Banking CISO/ ISM team as 1st line of defense drives WB-wide Information security and Cyber Security regulatory compliance, focuses on rolling out Security standards & procedures, facilitating training & awareness, Frontier AI, risk management, security advisory and vulnerabilities management.

The objective of the WB CISO/ISM team is to ensure executive and technical leadership and oversight of product security, operational technology, and initiatives. Provide vision and subject matter expertise necessary to manage information security risk to the organization to ensure business alignment, effective governance, operational efficiency, security monitoring and measurement.

Responsibilities:

• Drive implementation and continuous improvement of information security governance frameworks following the ING Risk Management practices.
• Perform cybersecurity Identity and access management risk assessments on High Privilege Access and control reviews across business and technology assets.
• Act as a team member supporting a change management business as usual and automation initiative by providing analysis or monitoring progress with guidance from WB CISO.
• Act as process group owner to conduct research on controls and processes to enable analysis of key themes and trends using primary data sources for quarterly risk opinion.

• Assist in assessing compliance with information security policies, regulatory requirements, and control standards.

• Track and report security findings, issues, exceptions, and remediation progress.

• Responsible for developing management reporting, dashboards, risk metrics, and governance updates.

• Collaborate with Technology, Risk, Compliance, Audit, Legal, and Business stakeholders to drive security outcomes.

• Implement required cyber security measures, such as IAM, CHM, 3rd party assessments and provide input on their design, monitoring performance to notify engineers experts of any problems.

• Support enterprise security initiatives, regulatory remediation programs, and strategic cybersecurity projects.

• Provide governance guidance for technology transformations, third-party engagements, and new business initiatives.

• Promote a strong security and risk management culture across the organization.

• Experience with enterprise AI tools and governance.

• Act as IT Security team SME to align activities with 2nd line of defence and share content knowledge and provide pragmatic solutions for DevOps teams. 
• Develop and mature the ING information security program, ensuring compliance with relevant regulations and standard methodologies and provide SME support Identity and access management.
• Liaison with the technical teams to ensure alignment between the security and business, thus coordinating the strategic/ tactical planning.
• Contribute as SME in the development, implementation, and maintenance of a strong information privacy and security program to meet ING risk appetite on quarterly basis.
• Manage IT security standards and procedures to ensure they are developed/updated/reviewed.
• Develop, implement, and maintain information security monitoring roadmap to align with firm KPI/KRI’s.

Qualifications and Competencies

• Bachelor’s or master’s degree in computer science or a related field.
• 3+ years’ experience in Information Security, Risk Management, Identity and Access Management, Cyber compliance, IT Audit, Dev Sec Ops, Frontier AI.
• CISM certification and Certified in Cyber Security (CC by ISC2), highly preferred.
• Familiar with non-financial risk models and threat assessments.
• Proven analytical ability to solve complex business and technical problems, critical thinker able to level, communicate and educate on both Senior Management and other SMEs in information technology teams.
• Poise and the ability to act calmly and competently in high-pressure, high-stress situations.
• Abreast on new tools and technologies related to information security.
• Demonstrated experience with various information security controls, including integration with secure IAM tooling’s, systems security, encryption systems, and application security.
• Like to continuously develop your (technical) expertise and knowledge
• Like to work as an independent professional, i.e., be pro-active, have high-quality standards and work according to the planning.
• Like to interact with Information Security Specialists and Senior Management to build strong relationships.
• A critical, though positive constructive mind set, accurate and thorough., connect self-reflection and action.
• Deep knowledge and experience with security and regulatory compliance as well as external audits.
• Prepared to challenge the program and Information security 2nd line of defence and have the "difficult conversations” where needed in the interests of ING policies & standards.

Salary Range: $85,000-110,000

The salary range listed reflects base salary only. This role is eligible for participation in a discretionary bonus program.

In addition to comprehensive health benefits (including a $0 premium medical plan with HSA), a generous 401k savings plan, and competitive PTO, ING provides a broad array of benefits including adoption, surrogacy, and fertility services; student debt assistance; and subsidies for expenses associated with commuting and fitness.

ING is a committed equal opportunity employer. We welcome applicants of diverse backgrounds and hire without regard to race, gender, religion, national origin, citizenship, disability, age, sexual orientation, or any other characteristic protected by law. We celebrate these differences and rely upon your unique perspective to innovate and seize new opportunities. Come as you are.

ING Bank does not have a commercial banking license in the U.S. and therefore not permitted to conduct a commercial banking business in the U.S. Through its wholly owned subsidiary ING Financial Services LLC, and its affiliates, it offers a full array of wholesale products such as commercial lending and a full range of FM products and services.