IT Risk Officer

ING; Manila; On-site; PHP 1,000,000 - 1,500,000; Full time

Benefits offered by this job

Global collaboration

Agile workplace

Professional growth

Innovation focus

Job summary

ING is seeking an IT Risk Officer to partner with DevOps squads, risk teams, auditors, and global stakeholders. You will strengthen IT controls, support risk governance, and ensure effective evidence management across our technology environment.

In an Agile setting, you will help teams maintain secure, compliant applications while continuously improving risk processes and control practices, contributing to ING's strong risk and control framework.

Qualifications

• Experience in IT risk management, cybersecurity, or related field.
• Knowledge of IT control frameworks and standards.
• Ability to present risk procedures clearly to diverse audiences.
• Experience with risk evidence collection and control assessments.

Responsibilities

• Act as central point for IT risk assessments and control evidence.
• Monitor deviations from IT risk controls and escalate as needed.
• Partner with DevOps to implement effective controls.
• Facilitate first- and second-line risk discussions.
• Support audits and due diligence reviews of vendors.
• Define and improve risk processes and evidence practices.
• Contribute to risk automation and continuous improvement.
• Communicate risk topics clearly to technical and non-technical stakeholders.
• Promote accountability, security, and risk awareness.

Skills

IT risk management

Risk frameworks

English communication

DevOps collaboration

Audits & controls

Planning & coordination

Stakeholder engagement

Education

Bachelor’s degree in IT

Certifications: CISSP/CISM/CRISC

Job description

Role Summary

As an IT Risk Officer within the Financial Markets domain, you will act as a trusted partner to DevOps squads, risk teams, auditors, and global stakeholders. Your role will focus on strengthening IT controls, supporting risk governance processes, and ensuring effective evidence management across our technology environment.

You’ll work in an Agile setting, helping teams maintain secure and compliant applications while continuously improving risk processes and controls.

About the Team

You’ll join a collaborative, international environment that supports business units across ING globally. Working closely with DevOps teams, risk professionals, security specialists, auditors, and third‑party vendors, you’ll play an important role in helping ING maintain a strong risk and control framework.

This is an opportunity to work with modern technologies, engage with global stakeholders, and contribute to meaningful initiatives that strengthen the security and resilience of our organization.

What You’ll Do

• Act as a central point of contact for IT risk assessments and control evidence requirements.
• Monitor, track, and manage deviations from established IT risk controls.
• Partner with DevOps squads to implement and demonstrate effective controls.
• Facilitate discussions between first‑line and second‑line risk teams.
• Conduct walkthroughs and provide support during internal and external audits.
• Support technical due diligence reviews of third‑party vendors.
• Define, document, and improve risk processes and control evidence practices.
• Contribute to risk automation and continuous improvement initiatives.
• Communicate risk‑related topics clearly to technical and non‑technical stakeholders.
• Promote a culture of accountability, security, and risk awareness.

What We’re Looking For

Required Skills

• Strong understanding of risk processes within an IT environment.
• Experience working with IT risk standards and control frameworks.
• Ability to communicate and present risk procedures in a clear and convincing manner.
• Proven planning, coordination, and organizational skills.
• Strong written and verbal communication skills in English.
• Experience in IT risk management, cybersecurity, or a related field.
• Knowledge of IT control frameworks and standards such as SOX, GDPR, ISO 2700x, NIST, or similar.
• Experience conducting control assessments, evidence collection, and risk mitigation activities.

Nice to Have

• Project management experience.
• Exposure to third‑party risk management, compliance, or IT risk automation initiatives.
• Experience working with DevSecOps teams.
• Knowledge of Agile ways of working.
• Bachelor’s degree in an IT‑related field.
• Certifications such as CISSP, CISM, CRISC, or equivalent.

What We Offe r

• Opportunities to collaborate with global stakeholders across ING.
• A modern technology environment focused on innovation and continuous improvement.
• Exposure to complex risk and security challenges within an international banking organization.
• An Agile workplace where learning, collaboration, and professional growth are encouraged.
• The opportunity to make a meaningful impact on the security and resilience of critical banking services.

Worried about the wage gap? So are we.

Our commitment to pay equity means you’ll be valued for your skills, not your gender. We especially encourage women in cybersecurity and IT risk to apply and help us build diverse teams that drive better outcomes.

About ING

With 65,000 employees and operations in approximately 40 countries, there is no shortage of opportunities for people with initiative who want to help people take a step ahead in life and in business. Do you want to work at the cutting edge of what’s possible and at the same time ensure you work with integrity and hold the customer’s interests at heart? Do you want to be surrounded by progressive, inspiring, diverse and supportive colleagues? Then there is no better place to invest your talents than at ING.