Head of Information Risk Management

ing; Brussel; Sur place; EUR 120 000 - 170 000; Plein temps

Résumé du poste

ING BE's Non-Financial Risk (NFR) team seeks a Head of Information Risk Management (IRM) to develop, implement, and oversee the bank's IT risk management framework. Lead a team of local and global experts, ensure secure and resilient IT systems, and align with regulatory requirements and business objectives.

The role requires strategic oversight, pragmatic risk-based decision making, and collaboration with business units to safeguard digital assets and operations across ING BE.

Qualifications

• Master degree in IT or equivalent is required.
• Strong understanding of IT infrastructure, cybersecurity and risks.
• Leadership and people-management experience are essential.
• Proven ability to influence across all levels including Exco.

Responsabilités

• Develop and oversee the bank's IT risk management framework.
• Lead and coach a global/local IRM team with accountability and growth.
• Challenge IT risk management execution and drive corrective actions.
• Collaborate with business units to ensure risk policies are applied.

Connaissances

IT risk management

Leadership

Stakeholder management

Communication

Problem solving

Formation

Master's degree in IT or equivalent

Description du poste

ING BE's Non Financial Risk team

Non-Financial Risk (NFR) ING BE is a trusted business partner challenging and advising business and IT on performing balanced and pragmatic Non-Financial Risk Management. As second Line of Defense (2LoD), its main activities consist of identifying, assessing, monitoring, and reporting on non-financial risks. To achieve this, NFR sets and monitors policies and risk appetite statements, defines and monitors key risk indicators, objectively challenges the execution of non-financial risk management by the 1LoD and advises the organisation on NFR related topics.

Position Overview

The Head of Information Risk Management (IRM) is a leadership role responsible for developing, implementing, and overseeing the bank's IT risk management framework. This position ensures that the bank's information technology systems are secure, resilient, and aligned with regulatory requirements and business objectives. The role involves strategic oversight, risk governance, a strong pragmatic approach, and collaboration across business units to safeguard the bank's digital assets and operations. The Head of IRM also leads and coaches a team of local and global experts, fostering a culture of accountability, growth, and excellence.

Key Responsibilities

• Challenge and enhance IT risk management execution implementing corrective actions where necessary.
• Continuously refine and optimize methodologies and procedures to ensure robust IT risk oversight and to support business management in effectively controlling IT risks within designated business processes.
• Foster strong relationships with strategic customers, serving as a trusted business partner to build professional credibility and mutual trust.
• Motivate stakeholders to commit fully to IT Risk objectives and drive exceptional performance…
• Ensure the IT risk team possesses the necessary expertise, leveraging individual strengths for maximum impact
• Support the first-line and business stakeholders through specialist guidance on interpreting and applying IT risk policies and procedures, resolving queries and issues efficiently.
• Contribute to the development and enhancement of IT risk policies, procedures, ensuring alignment with established IT risk principles and compliance with internal and external regulatory requirements.
• Ensure that IT risks, issues, dependencies, and constraints are proactively managed at the project level. Where IT risks or issues threaten project delivery, develop and agree on recovery plans to mitigate impacts and maintain strategic alignment.

Qualifications & Experience

• A Master degree in IT or equivalent through experience
• Deep understanding of IT infrastructure, cybersecurity, and emerging technologies and risks
• Professional certifications such as CISM, CRISC, CISSP, or equivalent are highly desirable.
• Strong leadership and people management skills, with experience coaching and developing teams.
• Strong understating of ING's IT Risk Control framework combined with a pragmatic risk-based approach with regards to its day-to-day use.
• Ability to influence, work effectively, across all levels of the organization including Exco level
• Very good knowledge of English, Dutch and/or French
• Very good problem solving, communication and self-organization skills
• Have a dynamic personality, take initiative and be flexible
• Willing to work in a constantly changing environment
• Be a team player