Associate, Security Engineer

Details

This role is part of a diverse Information Security team responsible for maintaining and improving the Information Security program posture for ING Americas. The Security Engineer will drive remediation of control-related matters, proactively identify regulatory or security gaps, collaborate with vendors and IT peers on governance, and ensure alignment to security standards and frameworks. The position focuses on maturing information security practices (shift-left security), with an emphasis on Identity and Access Management (IAM), IT risk, and cloud security.

About the position

This individual will work closely with other members of the Information Security team to ensure the security of information systems and data. The role expects a well-rounded risk practitioner versed in information security norms and across multiple cybersecurity methodologies, IT Risk, and IAM best practices.

Responsibilities

• Own IT risk controls and processes within the Wholesale Banking paradigm shift strategic initiative.
• Advise local process owners on designing and implementing IT and security processes and systems to manage and report IT & Cyber Risk.
• Maintain a thorough understanding of Identity and Access Management realms and stay current with security standards and IAM best practices and patterns.
• Manage execution of critical processes and evaluate/adopt IAM solutions across ING applications.
• Serve as a subject-matter expert to the information security team in developing, implementing, and maintaining the information security program aligned to ING risk appetite.
• Liaise with and enable DevOps engineers to provide quality control execution to support IAM onboarding and control implementation.
• Design, implement, and monitor security safeguards and continuously assess their effectiveness against evolving cybersecurity threats.
• Develop a risk-aware culture and provide governance and support for IT security standards.
• Develop and implement information security strategies for the banking industry to improve security posture.
• Employ an experimental mindset to drive innovation.
• Conduct regular security assessments and audits to identify, mitigate, and escalate security risks.
• Maintain comprehensive documentation of security processes, tools, and procedures.

Requirements (Qualifications and Competencies)

• B.S. in Computer Science (or equivalent) or significant relevant experience.
• Top candidates may hold market-leading security certifications (e.g., CISM, CISA, CISSP).
• 3–5+ years' experience in Information Security practices, preferably with IAM experience.
• Technical expertise and hands-on experience with Microsoft MFA, CyberArk, and Azure Active Directory.
• Strong programming skills in Python or similar languages.
• Hands-on experience with Azure and Azure security services.
• In-depth understanding of security principles: Confidentiality, Integrity & Availability.
• Knowledge of industry cybersecurity regulations and laws (compliance).
• Strong communication skills to explain technical information to both technical and non-technical stakeholders, including senior management, auditors, and regulators.
• Collaborative teamwork skills to work with developers, system administrators, business users, and other stakeholders.

About the company

ING Americas Tech supports and drives innovative solutions across many industries and provides technical expertise combined with business knowledge. The team supports products for corporate and institutional clients within Wholesale Banking.

Salary and Benefits

• Salary Range: $110,000 - $140,000 per year.
• Benefits include comprehensive health benefits, a 401(k) savings plan, competitive PTO, adoption/surrogacy/fertility services, student debt assistance, and subsidies for commuting and fitness-related expenses.

Equal Opportunity

ING is an equal opportunity employer and hires without regard to protected characteristics. ING Bank does not have a commercial banking license in the U.S.; wholesale products are offered through its subsidiary and affiliates.