Associate, IT Governance Specialist

Americas Technology | Infrastructure Technology | Associate, IT Governance Specialist | New York

In the Americas, ING’s Wholesale Banking division offers a broad range of innovative financial products and services to domestic and international corporate and institutional clients. When you come to work at ING, you’re joining a team where individuality isn’t just accepted, it’s encouraged. We’ve built a culture that’s fun, friendly and supportive – it’s the kind of place where you can be yourself and make the most of whatever you have to offer.

We give people the freedom to take risks, think differently, take ownership of their work, and make great things happen. We’re here to help you get ahead. And with our global network, there’s plenty of scope to take your career in new directions, perhaps even ones you’ve never considered. ING Americas follows a hybrid work model, allowing for in-office / work from home flexibility.

Hybrid work arrangements vary based on business area.

The IT Service Provider Governance Specialist is responsible for coordinating and executing Third Party and Intragroup Party Management (TIPM) activities on behalf of IT Service and Contract Owners, with a focus on Americas IT Infrastructure services. The function of this role is to ensure compliance with ING TIPM policy, risk control standards, and governance requirements including both pre-contracting due diligence and post-contracting oversight.

The role operates within the First Line of Defense (1

LoD) and helps ensure that service arrangements are properly defined and governed, controls are implemented and evidenced, and service review, continuous monitoring, remediation tracking, and reporting obligations are fulfilled to support secure service delivery, operational resilience, and regulatory compliance. The role acts with and on behalf of IT Service / Contract Owners. Accountability remains with the Service Owners.

• TIPM Governance & Lifecycle Coordination:
  Execute governance activities and ensure arrangements are assessed, approved, registered and managed across the full lifecycle, including pre-contracting due diligence, in-life governance, and exit readiness.
• Control Execution & Compliance:
  Plan and execute TIPM control requirements including third-party cybersecurity and business continuity evaluations; coordinate risk assessments, support baseline and due diligence activities, and perform control monitoring. Gather and assess vendor risk control evidence.
• Service Review Management:
  Organize and facilitate regular Service Review Meetings (SRM) and Strategic Service Reviews (SSR) for critical and non-critical service arrangements.
• Third Party Assurance & Risk Oversight:
  Coordinate assurance report reviews, cyber and operational risk monitoring activities, and follow through on issue remediation and risk mitigation actions with relevant stakeholders.
• Contract & Lifecycle Support:
  Coordinate contracting activities, support pre-contracting due diligence, maintain in-life governance, and ensure operational and contractual considerations are addressed through transition and exit phases.
• Data Management & Reporting:
  Maintain TIPM registers, reporting, and audit evidence.
• Regulatory & Policy Alignment:
  Define and implement processes to ensure compliance with TIPM policy, TPCRM / ITRS requirements, FFIEC, NYDFS, DORA, and other relevant internal standards and regulatory expectations.
• Key Stakeholder Engagement Coordinate and maintain close communication with stakeholders including IT Service Owners / Application Owners, Procurement (Global and Americas), Legal / Contracting, Operational Risk Management (ORM / NFR), CISO / IT Risk, Finance / Vendor…