Senior Cyber & AI Risk Strategist

ing; Madrid; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Flexible work model

Restaurant card

Health insurance

Life insurance

Pension plan

Transport allowance

Office amenities

Job summary

ING Hubs Spain is seeking a Cyber Risk / AI Risk Senior Expert to strengthen ING's cyber, technology, and AI risk management capabilities. You will provide expert challenge, oversight, and strategic guidance to ensure risks are identified, assessed, managed, and reported in line with risk appetite and regulations.

You will work across Business, Technology, Security, Risk, and Compliance, influencing initiatives and supporting safe AI adoption while safeguarding customers and operations.

Qualifications

• Minimum 8 years of experience in Cybersecurity, Cyber Risk, Information Security, Technology Risk, Governance, Risk & Compliance, or Enterprise Risk Management.
• Preferred 10+ years in large, regulated organizations.
• Experience with cyber risk assessments, risk registers, control frameworks, and risk reporting.
• Experience managing third-party and technology risks, including cloud and AI-related risks.
• Strong understanding of AI governance and AI risk management principles.
• Knowledge of risk, security, and regulatory frameworks (NIST, ISO 27001, COBIT, DORA, EBA/ECB, GDPR).
• Experience with GRC platforms such as OneTrust, ServiceNow IRM, Archer, or equivalent.
• Strong stakeholder management, communication, and influencing skills.
• Bachelor's degree in relevant fields; certifications preferred (CISSP, CISM, CRISC, CISA, CGRC).

Responsibilities

• Conduct cyber, technology, AI, and third-party risk assessments.
• Manage and maintain the cyber risk register, including risk treatment, tracking, and reporting.
• Evaluate security policy exceptions and risk acceptance requests.
• Assess AI solutions, use cases, and third-party providers from a risk and control perspective.
• Support third-party risk management and vendor security due diligence.
• Produce risk metrics, KRIs, dashboards, and executive-level reporting.
• Advise stakeholders on risk mitigation strategies and control effectiveness.
• Support regulatory, audit, compliance, and supervisory engagements.
• Contribute to continuous improvement of cyber risk management and AI governance frameworks.
• Act as a trusted advisor to senior management on cyber and AI risk matters.

Skills

Cyber risk assessments

Stakeholder management

Communication

Influencing skills

Regulatory expectations understanding

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or equivalent experience

Tools

OneTrust

ServiceNow IRM

Archer

Job description

ING Hubs Spain is seeking a Cyber Risk / AI Risk Senior Expert to strengthen ING's cyber, technology, and AI risk management capabilities. You will provide expert challenge, oversight, and strategic guidance to ensure risks are identified, assessed, managed, and reported in line with risk appetite and regulations.

You will work across Business, Technology, Security, Risk, and Compliance, influencing initiatives and supporting safe AI adoption while safeguarding customers and operations.