IT Risk Advisor

We are looking for an IT Risk advisor to complement the Information Risk Management (IRM) team of ING Hubs Slovakia in Bratislava. As a strategic partner of the global ING Bank, ING Hubs Slovakia is delivering key services to Bank’s clients which are branches and subsidiaries.

As IT Risk advisor you will contribute to the programs, projects and safe run of the ING organization within the Non Financial Risk (NFR) and specifically Information Risk Management (Information (Technology) Risk and Continuity Risks mainly).

You will challenge, advise and support the identification, analysis and mitigation by first line of defense/business of non financial risks to maintain the acceptable levels which are proportionate to its value and criticality.

You will raise the NFR awareness throughout units of our internal business partners and check that the first line of defense/business is complying with the risk appetite and escalate where necessary. You will closely cooperate with colleagues in other countries of ING´s presence and with Corporate Information Risk management domain located in Amsterdam.

Job description:

As an IT Risk Advisor your role is to:

• Execute 2nd Line of Defense Risk management
• Challenge risk management execution and control processes and take corrective actions if necessary (escalation). Coordinate the reporting of risks and controls by the first line of defense (business) regarding designated business processes.
• Information and Business Advice
• Provide specialist advice on the interpretation and applicability of policies and procedures, resolve queries and issues and refer complex issues towards internal business partners related to information security.
• Contribute to execution of various Business Impact Assessments, Risk Assessments or detailed IT Risk Assessments
• Participate in Projects and Program Risks and Issues Management
• Identify and evaluate risks, issues, dependencies, and constraints associated with the projects and within business as usual situation, escalate where appropriate. Where necessary, contribute to developing, agree on, and participate on implementation of solutions to overcome these.
• Challenge the first line of defense and periodically report upon the risks related to Information (Technology) Risks and Continuity Risks.
• Perform specific second line reviews (e.g. spot checks – reviewing the implementation and effectiveness of IT controls for (Business) applications and relevant entity controls
• Contribute to the development and maintenance of a risk awareness related to your scope within the organization
• Risk Monitoring: Execute Second Line Monitoring activities (review and challenge) within Key Control Testing and Quality Assurance activities related to IT assets