Senior Cyber & AI Risk Leader — Hybrid

ING Hubs Spain; Madrid; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Health insurance

Pension plan

Flexible remuneration

Transport allowance

Restaurant card

Doctor on-site

Hairdresser on-site

Gym on-site

The Good Service

Job summary

ING Hubs Spain is seeking a Senior Expert to strengthen cyber and AI risk management across the bank. You will challenge senior stakeholders and shape risk decisions, translating complex tech risks into clear business insights while safeguarding customers and operations.

You will lead cross-functional teams, influence governance, and drive continuous improvement of risk frameworks in a hybrid work model in Madrid, with a focus on regulatory alignment and responsible AI adoption.

Qualifications

• Minimum 8 years of experience in Cybersecurity, Cyber Risk, Information Security, Technology Risk, Governance, Risk & Compliance, or Enterprise Risk Management.
• Preferred 10+ years of experience within large, regulated organizations.
• Proven experience with cyber risk assessments, risk registers, control frameworks, and risk reporting.
• Experience managing third-party and technology risks, including cloud and AI-related risks.
• Strong understanding of AI governance and AI risk management principles.
• Knowledge of risk, security, and regulatory frameworks, including NIST, ISO 27001, COBIT, DORA, EBA/ECB supervisory expectations, GDPR, and related financial sector security requirements.
• Experience with GRC platforms such as OneTrust, ServiceNow IRM, Archer, or equivalent.
• Strong stakeholder management, communication, and influencing skills.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or equivalent experience.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, CGRC, or equivalent are preferred.

Responsibilities

• Conduct cyber, technology, AI, and third-party risk assessments.
• Manage and maintain the cyber risk register, including risk treatment, tracking, and reporting.
• Evaluate security policy exceptions and risk acceptance requests.
• Assess AI solutions, use cases, and third-party providers from a risk and control perspective.
• Support third-party risk management and vendor security due diligence.
• Produce risk metrics, KRIs, dashboards, and executive-level reporting.
• Advise stakeholders on risk mitigation strategies and control effectiveness.
• Support regulatory, audit, compliance, and supervisory engagements.
• Contribute to the continuous improvement of cyber risk management and AI governance frameworks.
• Act as a trusted advisor to senior management on cyber and AI risk matters.

Skills

Cybersecurity

Cyber Risk

Information Security

Technology Risk

Governance, Risk & Compliance

Enterprise Risk Management

AI governance

Regulatory frameworks

GRC platforms

Education

Bachelor's degree in Cybersecurity

Tools

OneTrust

ServiceNow IRM

Archer

Job description

ING Hubs Spain is seeking a Senior Expert to strengthen cyber and AI risk management across the bank. You will challenge senior stakeholders and shape risk decisions, translating complex tech risks into clear business insights while safeguarding customers and operations.

You will lead cross-functional teams, influence governance, and drive continuous improvement of risk frameworks in a hybrid work model in Madrid, with a focus on regulatory alignment and responsible AI adoption.