Job Description

Discover ING Hubs Romania 

ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of over 2000 high-performing engineers, risk, and operations professionals. 

We started out in 2015 as ING’s software development hub, then steadily expanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities and operate from two locations: Bucharest and Cluj-Napoca 

Our tech capabilities remain the core of our business, with more than 1800 colleagues active in Data and Analytics Tech, Tech Foundation and Channels, Retail Core Banking and Architecture, and Global Products and Technology Services 

We enjoy a flexible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.  

For us, impact isn't a perk It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things and they love doing it in good company. Do you?  

The Mission

The NFR Hubs Romania team is an integral part of ING’s Non-Financial Risk domain. The teamis responsible forensuring consistent implementation of NFR frameworks, policies, and procedures, while fostering a collaborative and high-performing environment within the hubs.

TheData RiskNFR Specialist is part of the Center ofExpertise(CoE) Data Management Risk team within the Non-Financial Risk (NFR) domain. This team focuses onidentifying, managing, and mitigating risks related to datagovernance, data risk, data quality, data integrity,anddata privacy, guiding policy setting and RAS metrics for data-related risks, supporting ING’s global risk managementobjectives

The role will report hierarchically to the Lead of Information & Technology Risk in Hubs Romania and functionally to Global Lead of ITR TeamII located in Amsterdam, The Netherlands.

Your day to day

• Helpsidentify, measure, and reduce risks connected to data management and relatedtechnologies;

• Assistsin analyzing events and incidents to find weaknesses in how data is managed and in IT systems;

• Supports the creation and review of data management policies to help ensure compliance with regulations;

• Monitors the implementation of controls and remediation plans, and helps challenge risk acceptance decisions;

• Participates in independent risk assessments and reviews how effective controls are;

• Helps review incident response reports and root cause analysis findings;

• Assistsin reviewing and reporting Key Risk Indicators (KRIs);

• Supports NFR teams with data risk analysis, oversight, and reporting activities;

• Provides input to senior management on data management risks andpossible mitigationsteps;

• Keeps up to date with new data risk regulations and industry best practices.

Specific Tasks

• Assistwith analyzing data management events and incidents to helpidentifyrisks and improvement areas;

• Support the development and review of data management policies to ensure they meet regulatory requirements;

• Helpmonitorrisk controls and track the progress of remediation plans;

• Participate in independent risk assessments and help review the effectiveness of controls;

• Contribute to the review of incident response reports and root cause analysis findings;

• Help review and update Key Risk Indicators (KRIs) for data management;

• Provide support to NFR teams with oversight and reporting activities related to data risk;

• Offer input to senior management and 1LoD teamsregardingpotential data risk mitigation steps.

Whatyou’llbring to the team

• University/Post Graduate(Master’s) Degree;

• 3+ years’ experience in data management risk roles, ideally withinCDO,CISO or 2LoD departments;

• Knowledge of data management frameworks, methods, and data protection;

• Affinity with data management technologies, platforms, and tools;

• Basic understanding of relevant regulations (e.gBCBS239,GDPR).

If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on our website (make sure to scroll until you reach the Data Protection section/Candidates tab).