Associate, Information Security Engineer

Details

In the Americas, ING’s Wholesale Banking division offers innovative financial products and services to domestic and international corporate and institutional clients. ING Americas follows a hybrid work model, allowing for in-office and work-from-home flexibility; arrangements vary by business area.

The Information Security Governance Expert is responsible for overseeing day-to-day operations related to Identity and Access Management, cyber risk management, IT controls compliance, and control effectiveness across the organization. The role ensures that information security risks are identified, assessed, monitored, and reported while supporting adherence to ING policies, regulatory requirements, and industry standards.

The Wholesale Banking CISO/ISM team operates as the first line of defense, driving information security and cybersecurity regulatory compliance across Wholesale Banking. The team focuses on security standards and procedures, training and awareness, Frontier AI, risk management, security advisory, and vulnerability management. It provides executive and technical leadership and oversight of product security, operational technology, and security initiatives.

Responsibilities

• Drive the implementation and continuous improvement of information security governance frameworks in accordance with ING risk management practices.
• Perform cybersecurity Identity and Access Management risk assessments focused on high-privilege access and conduct control reviews across business and technology assets.
• Support change management, business-as-usual activities, and automation initiatives by providing analysis and monitoring progress under the guidance of the Wholesale Banking CISO.
• Act as a process group owner, conducting research on controls and processes to analyze key themes and trends using primary data sources for quarterly risk opinions.
• Assess compliance with information security policies, regulatory requirements, and control standards.
• Track and report security findings, issues, exceptions, and remediation progress.
• Develop management reporting, dashboards, risk metrics, and governance updates.
• Collaborate with Technology, Risk, Compliance, Audit, Legal, and Business stakeholders to drive security outcomes.
• Implement cybersecurity measures such as IAM, CHM, and third-party assessments; provide input on their design and monitor performance to notify engineering experts of issues.
• Support enterprise security initiatives, regulatory remediation programs, and strategic cybersecurity projects.
• Provide governance guidance for technology transformations, third-party engagements, and new business initiatives.
• Promote a strong security and risk management culture across the organization.
• Apply experience with enterprise AI tools and governance.
• Act as an IT Security subject matter expert, aligning activities with the second line of defense and providing pragmatic solutions for DevOps teams.
• Develop and mature ING’s information security program, ensuring compliance with relevant regulations and standard methodologies, and provide subject matter expertise in Identity and Access Management.
• Liaise with technical teams to align security and business objectives and coordinate strategic and tactical planning.
• Contribute as a subject matter expert to the development, implementation, and maintenance of an information privacy and security program that meets ING’s quarterly risk appetite requirements.
• Manage IT security standards and procedures to ensure they are developed, updated, and reviewed.
• Develop, implement, and maintain an information security monitoring roadmap aligned with firm KPIs and KRIs.

Requirements

• Bachelor’s or master’s degree in computer science or a related field.
• At least 3 years of experience in information security, risk management, Identity and Access Management, cyber compliance, IT audit, DevSecOps, or Frontier AI.
• CISM and Certified in Cyber Security (CC) by ISC2 certifications are highly preferred.
• Familiarity with non-financial risk models and threat assessments.
• Proven analytical ability to solve complex business and technical problems.
• Ability to communicate with and educate senior management and information technology subject matter experts.
• Ability to act calmly and competently in high-pressure situations.
• Awareness of new tools and technologies related to information security.
• Experience with information security controls, including secure IAM tooling integrations, systems security, encryption systems, and application security.
• Deep knowledge and experience with security and regulatory compliance and external audits.
• Ability to work independently, proactively, and to high-quality standards.
• Ability to build strong relationships with Information Security Specialists and senior management.
• A critical, positive, and constructive mindset, with attention to accuracy and thoroughness.
• Willingness to challenge information security programs and the second line of defense when necessary in the interests of ING policies and standards.

Compensation and Benefits

• Base salary range: $85,000–$110,000 per year.
• Eligible for participation in a discretionary bonus program.
• Health benefits, including a $0 premium medical plan with HSA.
• 401(k) savings plan and competitive paid time off.
• Adoption, surrogacy, and fertility services.
• Student debt assistance.
• Subsidies for commuting and fitness expenses.

ING is an equal opportunity employer that welcomes applicants from diverse backgrounds.