Cyber Risk / AI Risk Expert

ING Hubs Spain; Madrid; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Health insurance

Pension plan

Flexible remuneration

Transport allowance

Restaurant card

Doctor on-site

Hairdresser on-site

Gym on-site

The Good Service

Job summary

ING Hubs Spain is seeking a Senior Expert to strengthen cyber and AI risk management across the bank. You will challenge senior stakeholders and shape risk decisions, translating complex tech risks into clear business insights while safeguarding customers and operations.

You will lead cross-functional teams, influence governance, and drive continuous improvement of risk frameworks in a hybrid work model in Madrid, with a focus on regulatory alignment and responsible AI adoption.

Qualifications

• Minimum 8 years of experience in Cybersecurity, Cyber Risk, Information Security, Technology Risk, Governance, Risk & Compliance, or Enterprise Risk Management.
• Preferred 10+ years of experience within large, regulated organizations.
• Proven experience with cyber risk assessments, risk registers, control frameworks, and risk reporting.
• Experience managing third-party and technology risks, including cloud and AI-related risks.
• Strong understanding of AI governance and AI risk management principles.
• Knowledge of risk, security, and regulatory frameworks, including NIST, ISO 27001, COBIT, DORA, EBA/ECB supervisory expectations, GDPR, and related financial sector security requirements.
• Experience with GRC platforms such as OneTrust, ServiceNow IRM, Archer, or equivalent.
• Strong stakeholder management, communication, and influencing skills.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or equivalent experience.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, CGRC, or equivalent are preferred.

Responsibilities

• Conduct cyber, technology, AI, and third-party risk assessments.
• Manage and maintain the cyber risk register, including risk treatment, tracking, and reporting.
• Evaluate security policy exceptions and risk acceptance requests.
• Assess AI solutions, use cases, and third-party providers from a risk and control perspective.
• Support third-party risk management and vendor security due diligence.
• Produce risk metrics, KRIs, dashboards, and executive-level reporting.
• Advise stakeholders on risk mitigation strategies and control effectiveness.
• Support regulatory, audit, compliance, and supervisory engagements.
• Contribute to the continuous improvement of cyber risk management and AI governance frameworks.
• Act as a trusted advisor to senior management on cyber and AI risk matters.

Skills

Cybersecurity

Cyber Risk

Information Security

Technology Risk

Governance, Risk & Compliance

Enterprise Risk Management

AI governance

Regulatory frameworks

GRC platforms

Education

Bachelor's degree in Cybersecurity

Tools

OneTrust

ServiceNow IRM

Archer

Job description

At ING Hubs Spain we are looking for a Cyber Risk / AI Risk Expert

Your Role And Work Environment

The Cyber Risk / AI Risk Senior Expert is a senior risk professional responsible for strengthening ING's cyber, technology, and AI risk management capabilities. The role provides expert challenge, advice, and oversight on key risk decisions, ensuring that risks are effectively identified, assessed, managed, and reported in line with ING's risk appetite and regulatory expectations.

Working across Business, Technology, Security, Risk, and Compliance functions, the Senior Expert influences strategic initiatives, supports the safe adoption of emerging technologies including AI, and drives continuous improvement of the Bank's cyber and AI risk governance. The role acts as a trusted advisor to senior stakeholders, translating complex technology risks into clear business insights and enabling informed decision-making while safeguarding ING's customers, operations, and reputation.

Your Key Responsibilities

• Conduct cyber, technology, AI, and third-party risk assessments.
• Manage and maintain the cyber risk register, including risk treatment, tracking, and reporting.
• Evaluate security policy exceptions and risk acceptance requests.
• Assess AI solutions, use cases, and third-party providers from a risk and control perspective.
• Support third-party risk management and vendor security due diligence.
• Produce risk metrics, KRIs, dashboards, and executive-level reporting.
• Advise stakeholders on risk mitigation strategies and control effectiveness.
• Support regulatory, audit, compliance, and supervisory engagements.
• Contribute to the continuous improvement of cyber risk management and AI governance frameworks.
• Act as a trusted advisor to senior management on cyber and AI risk matters.

What are we looking for?

Want to know if this job is made for you? These are some of the qualities that we value the most for this role.

• Minimum 8 years of experience in Cybersecurity, Cyber Risk, Information Security, Technology Risk, Governance, Risk & Compliance, or Enterprise Risk Management.
• Preferred 10+ years of experience within large, regulated organizations.
• Proven experience with cyber risk assessments, risk registers, control frameworks, and risk reporting.
• Experience managing third-party and technology risks, including cloud and AI-related risks.
• Strong understanding of AI governance and AI risk management principles.
• Knowledge of risk, security, and regulatory frameworks, including NIST, ISO 27001, COBIT, DORA, EBA/ECB supervisory expectations, GDPR, and related financial sector security requirements.
• Experience with GRC platforms such as OneTrust, ServiceNow IRM, Archer, or equivalent.
• Strong stakeholder management, communication, and influencing skills.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or equivalent experience.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, CGRC, or equivalent are preferred.

What do we offer?

The time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details. Check out what is waiting for you!

Be flexible my friend.

Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.

Restaurant card.

So that thinking about what to have for lunch doesn’t take up your time or your cravings.

Our house will be your home.

In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!

Health insurance.

For you and all your family (spouse/partner and children).

Life insurance.

We help you protect what matters most to you.

Flexible remuneration.

In addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids…

Transport allowance.

It doesn't matter where you live, we’ll help you get to the office.

Pension plan.

You can benefit from our pension plan after 1 month with us!

Discover ING Hubs Spain

We’re building something exciting—and we want you to be part of it.

ING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.

What makes us different?

We have a tech-first mindset:

We’re not just a bank—we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology.

We have global impact:

You’ll be working on solutions that serve more than 34 million of customers in over 38 countries.

We are agile:

ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross-functional way of working.

Sustainability at the heart of what we do:

We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact.

At ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning.

We’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose—we’re looking forward to meeting you.