Cyber Security Risk Expert @ING Hubs Romania

• Serve as an experienced expert inidentifying, managing, measuring, and mitigating cyber securityrisks;

• Analyze security events and incidents; conduct forensic investigations followingbreaches;

• Develop andmaintaincybersecurity policies, ensuring they align with regulatoryrequirements;

• Independently assess cyber risks andmonitorongoing threatintelligence;

• Provide guidance and support to management and the first line of defense on cyber riskmatters;

• Utilize strong analytical skills and technicalexpertiseto address complex cyber securityissues;

• Effectively communicate intricate topics to diversestakeholders;

• Play a vital role in strengthening ING’s resilience and advancing its strategic risk management initiatives.

Specific Tasks

• Analyze security events, incidents, threats, and malware; conduct forensic investigations afterbreaches;

• Develop andmaintaincybersecurity-related policies, ensuring alignment with externalregulations;

• Monitor and challenge the implementation of controls, remediation plans, and riskacceptances;

• Perform independent cyber risk assessments and control effectivenessreviews;

• Review and challenge incident response reports and root causeanalyses;

• Monitor threat intelligence and assess its impact on ING’s riskposture;

• Challenge the definition of Key Risk Indicators (KRIs);

• Support NFR teams in deep dives, oversight, andreporting;

• Advisemanagement on cyber risk exposure and mitigationstrategies;

• Stay up to date with emerging threats, attacks, regulatory developments, andindustrybest practices.

Whatyou’llbring to the team

• Master’s degree in Computer Scienceorequivalent(Math, Engineering);

• 7+ years of experience in cyber risk management roles, ideally inan ITSecurity (eg.CISO)team;

• Strong understanding of cybersecurity, threats, attack methods, andtechniques;

• Expertisein data centers, infrastructure, cryptography, cloud, platforms, and businessapplications;

• Strong skills in Security Detection & Response, Vulnerability Management, Datacenters, andNetwork;

• Solidexpertisein Identity and Access Management, ITResilience;

• Solid understanding of relevant regulations (e.g., DORA, EBA,MARisk).

If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on ourwebsite (make sure to scroll until you reach the Data Protection section/Candidates tab).