IT Risk Officer

ING Hubs Philippines; Metro Manila; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

ING Hubs Philippines seeks an IT Risk Officer to strengthen IT controls and support risk governance within the Financial Markets domain. You will partner with DevOps squads, risk teams, auditors, and global stakeholders to improve evidence management and risk processes.

In an Agile environment, you will help ensure secure and compliant applications while driving continuous risk improvement across our technology landscape.

Qualifications

• Experience in IT risk management and cybersecurity.
• Ability to communicate risk procedures clearly to both technical and non-technical audiences.
• Experience conducting control assessments and evidence collection.
• Familiarity with SOX, GDPR, ISO 2700x, NIST standards.

Responsibilities

• Act as a central point of contact for IT risk assessments and control evidence requirements.
• Monitor, track, and manage deviations from established IT risk controls.
• Partner with DevOps squads to implement and demonstrate effective controls.
• Facilitate discussions between first-line and second-line risk teams.
• Conduct walkthroughs and provide support during internal and external audits.
• Support technical due diligence reviews of third-party vendors.
• Define, document, and improve risk processes and control evidence practices.
• Contribute to risk automation and continuous improvement initiatives.
• Communicate risk-related topics clearly to technical and non-technical stakeholders.
• Promote a culture of accountability, security, and risk awareness.

Skills

IT risk management

Risk frameworks & control standards

English communication

Planning & coordination

Audit support

DevOps / DevSecOps exposure

Education

Bachelor's degree in IT

Job description

Job Description:

Role Summary

As an IT Risk Officer within the Financial Markets domain, you will act as a trusted partner to DevOps squads, risk teams, auditors, and global stakeholders. Your role will focus on strengthening IT controls, supporting risk governance processes, and ensuring effective evidence management across our technology environment.

You'll work in an Agile setting, helping teams maintain secure and compliant applications while continuously improving risk processes and controls.

About the Team

You'll join a collaborative, international environment that supports business units across ING globally. Working closely with DevOps teams, risk professionals, security specialists, auditors, and third-party vendors, you'll play an important role in helping ING maintain a strong risk and control framework.

This is an opportunity to work with modern technologies, engage with global stakeholders, and contribute to meaningful initiatives that strengthen the security and resilience of our organization.

What You'll Do

• Act as a central point of contact for IT risk assessments and control evidence requirements.
• Monitor, track, and manage deviations from established IT risk controls.
• Partner with DevOps squads to implement and demonstrate effective controls.
• Facilitate discussions between first-line and second-line risk teams.
• Conduct walkthroughs and provide support during internal and external audits.
• Support technical due diligence reviews of third-party vendors.
• Define, document, and improve risk processes and control evidence practices.
• Contribute to risk automation and continuous improvement initiatives.
• Communicate risk-related topics clearly to technical and non-technical stakeholders.
• Promote a culture of accountability, security, and risk awareness.

What We're Looking For

Required Skills

• Strong understanding of risk processes within an IT environment.
• Experience working with IT risk standards and control frameworks.
• Ability to communicate and present risk procedures in a clear and convincing manner.
• Proven planning, coordination, and organizational skills.
• Strong written and verbal communication skills in English.
• Experience in IT risk management, cybersecurity, or a related field.
• Knowledge of IT control frameworks and standards such as SOX, GDPR, ISO 2700x, NIST, or similar.
• Experience conducting control assessments, evidence collection, and risk mitigation activities.

Nice to Have

• Project management experience.
• Exposure to third-party risk management, compliance, or IT risk automation initiatives.
• Experience working with DevSecOps teams.
• Knowledge of Agile ways of working.
• Bachelor's degree in an IT-related field.
• Certifications such as CISSP, CISM, CRISC, or equivalent.

What We Offer

• Opportunities to collaborate with global stakeholders across ING.
• A modern technology environment focused on innovation and continuous improvement.
• Exposure to complex risk and security challenges within an international banking organization.
• An Agile workplace where learning, collaboration, and professional growth are encouraged.
• The opportunity to make a meaningful impact on the security and resilience of critical banking services.

Worried about the wage gap? So are we.

Our commitment to pay equity means you'll be valued for your skills, not your gender. We especially encourage women in cybersecurity and IT risk to apply and help us build diverse teams that drive better outcomes.

Requirements: