Senior Third-Party Cyber Risk Assessor — Global Impact

ING Hubs Spain; Madrid; Híbrido; EUR 90.000 - 130.000; Jornada completa

Descripción de la vacante

ING Hubs Spain is building a new Cybersecurity organization and seeks a Senior Third-Party Cyber Assurance Expert. You will assess external suppliers, lead risk-based reviews, and collaborate with global CISO teams to strengthen ING's third-party ecosystem.

The role requires hands-on security testing, governance understanding, and the ability to translate technical findings into business risk. You will operate across multiple countries with travel and a focus on DORA compliance.

Formación

• Bachelor's or master's degree in CS, information security, cybersecurity, IT engineering, IT risk management, IT audit, or related disciplines.
• 3–6 years of professional experience in cybersecurity, IT audit, cyber risk management, third‑party risk management, information security, or similar fields.
• Strong understanding of cybersecurity technologies and architectures.
• Experience assessing and evaluating IT and cybersecurity controls.

Responsabilidades

• Plan, organize, and execute risk-based cybersecurity assessments and onsite inspections of ING's critical third-party providers.
• Independently evaluate the design and effectiveness of cybersecurity controls implemented by suppliers.
• Assess security governance, technology controls, operational resilience capabilities, and risk management practices.
• Conduct interviews, documentation reviews, field inspections, configuration assessments, and technical security evaluations.
• Identify cybersecurity risks, control weaknesses, and potential vulnerabilities impacting ING.
• Analyze findings and translate technical gaps into clear business risks and actionable recommendations.
• Support the execution and evaluation of security testing activities, including penetration testing and red teaming results where applicable.
• Produce professional reports and executive-ready dashboards for senior management.
• Collaborate with global security, risk, procurement, architecture, and audit teams.

Conocimientos

Cybersecurity

Risk management

Stakeholder management

Communication skills

Analytical thinking

Scripting / automation

Educación

Bachelor's or Master's in CS / IT

Herramientas

Nessus

Burp Suite

Kali Linux

Wireshark

Descripción del empleo

ING Hubs Spain is building a new Cybersecurity organization and seeks a Senior Third-Party Cyber Assurance Expert. You will assess external suppliers, lead risk-based reviews, and collaborate with global CISO teams to strengthen ING's third-party ecosystem.

The role requires hands-on security testing, governance understanding, and the ability to translate technical findings into business risk. You will operate across multiple countries with travel and a focus on DORA compliance.