Cyber Assurance Lead — Third-Party Risk

ING; Madrid; Híbrido; EUR 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Pension plan

Flexible remuneration

Transport allowance

Restaurant card

Electric mobility solutions

Descripción de la vacante

ING Hubs Spain is building a new Cybersecurity organization from the ground up, seeking a Third-Party Cyber Assurance Supervisor to protect ING from external supplier risks across critical business operations. You will lead risk-based assessments and inspections across the ING supply chain, collaborate with global security and risk teams, and shape future capabilities and processes.

This role offers international exposure across countries and industries, with room to influence risk management,

Formación

• Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, IT Engineering, IT Risk Management or IT Audit.
• 7-9 years of professional experience in Cybersecurity, IT Audit, Cyber Risk Management, Third-Party Risk Management, Information Security, or similar fields.
• Strong understanding of cybersecurity technologies and architecture.
• Knowledge of IT processes and standards (COBIT, ISO 27001, ISO 22001, etc.).
• Good understanding of risk management, governance frameworks, and the Three Lines Model.
• Knowledge of operating systems, networks, databases, IAM, cloud technologies, web technologies, software development practices, and containerization.
• Experience performing audits, cybersecurity assessments, supplier reviews, or risk evaluations.
• Strong analytical and problem-solving skills.
• Ability to communicate complex technical topics to technical and non-technical audiences.
• Excellent stakeholder management and influencing skills.
• Fluency in English, both written and spoken.
• Ability to work effectively in multicultural and international environments.

Responsabilidades

• Lead, plan, organize, and execute risk-based cybersecurity assessments and onsite inspections of ING’s critical third-party providers.
• Evaluate design and effectiveness of cybersecurity controls implemented by suppliers.
• Assess security governance, technology controls, operational resilience capabilities, and risk management practices.
• Conduct interviews, documentation reviews, field inspections, configuration assessments, and technical security evaluations.
• Identify cybersecurity risks, control weaknesses, and potential vulnerabilities impacting ING.
• Inspect data centres supporting critical services, including physical security and environmental controls.
• Translate findings into clear business risks and actionable recommendations.
• Produce professional reports and executive-ready dashboards for senior management.
• Collaborate with global security, risk, procurement, operations, and audit teams.

Conocimientos

Cybersecurity

Risk management

Audits / Assessments

Stakeholder management

Technical communication

English fluency

Analytical skills

Educación

Bachelor's or Master's degree in Computer Science / Information Security / Cybersecurity / IT Engineering / IT Risk Management or IT Audit

Herramientas

Nessus

Burp Suite

Kali Linux

Wireshark

Docker

Descripción del empleo

ING Hubs Spain is building a new Cybersecurity organization from the ground up, seeking a Third-Party Cyber Assurance Supervisor to protect ING from external supplier risks across critical business operations. You will lead risk-based assessments and inspections across the ING supply chain, collaborate with global security and risk teams, and shape future capabilities and processes.

This role offers international exposure across countries and industries, with room to influence risk management,