Lead IT Risk & Security

For the CTO Finance & Risk organization, we are looking for a Lead Business Control – Risk & Security. In this role, you lead the local Risk & Security Operations team and drive the IT Risk & Security agenda across the Finance & Risk domain. You combine people leadership, governance, and hands‑on steering to ensure Dev Ops teams operate securely, compliantly, and within ING’s risk appetite.

You act as the link between the global CISO domain and Finance & Risk, translating policies into pragmatic, scalable solutions.

• Lead and develop the team of 6 Risk & Security specialists in The Netherlands and 7 in Philippines.
• Steer SOx, Key Control Testing and First Line Monitoring activities for the entire CTO Finance & Risk organization.
• Support the ~1.200 Dev Ops engineers in CTO Finance & Risk in implementing, executing and monitoring IT Risk & Security controls and services.
• Drive risk remediation and ensure timely closure of findings.
• Enable Dev Ops teams with practical risk & security guidance.
• Improve and standardize ITSM processes (Incident, Problem, Change, Configuration).
• Act as trusted advisor to senior stakeholders across CTO, Risk and CISO.
• Collaborate with 2nd and 3rd line (e.g. IRM, Audit).
• Drive continuous improvement in risk & security ways of working.

• Strong experience in IT Risk, Security and/or IT Control environments.
• Solid understanding of SOx, IT controls and regulatory compliance.
• Knowledge of IAM, security monitoring, change management, pen‑testing, sourcing / 3rd party risk management, BIA/DRA processes and/or ITSMA.
• Able to manage multiple stakeholders and priorities.
• Hands‑on and pro‑active attitude.
• Able to explain complex matters in a simple way.
• Strong analytical and communication skills.
• Inspiring, pragmatic and results‑driven leader.
• Strong collaborator who enables others to succeed.
• Comfortable at challenging the status quo.
• Experience with Dev Ops and Agile ways of working.
• Focused on continuous improvement and impact.

• Proven leadership experience and stakeholder management at senior level.
• Experience with in ING or similar complex environment.
• Certifications such as CISM, CRISC, CISSP or CISA.
• Experience with project management cross teams – need to get things done in the F&R environment.
• Bachelor and Master degree.

• 25-28 vacation days depending on contract.
• Pension scheme.
• 13th month salary.
• 8% Holiday payment.
• Hybrid working.
• Personal growth and challenging work with endless possibilities.
• An informal working environment with innovative colleagues.
• More information: