Associate, Information Security Engineer

ing; United States; Hybrid; USD 120,000 - 170,000; Full time

Job summary

ING Americas seeks an Information Security Engineer Associate in New York within Wholesale Banking CISO/ISM. You will implement and oversee IAM, cyber risk management, IT controls compliance, and governance across the organization, ensuring regulatory alignment and risk visibility.

The role collaborates with Risk, Compliance, Audit, Legal and Technology teams in a hybrid setting. Ideal candidates have a Bachelor’s or Master’s in CS or related field, 3+ years in information security, and

Qualifications

• Bachelor’s or master’s degree in computer science or a related field.
• 3+ years' experience in Information Security, Risk Management, Identity and Access Management, Cyber compliance, IT Audit, Dev Sec Ops, Frontier AI.
• CISM certification and Certified in Cyber Security (CC by ISC2).

Responsibilities

• Drive information security governance frameworks and risk management practices.
• Perform IAM risk assessments and control reviews across assets.
• Support change management, monitoring, and automation initiatives with guidance from WB CISO.
• Develop management reporting, dashboards, risk metrics and governance updates.
• Collaborate with Technology, Risk, Compliance, Audit, Legal and Business stakeholders to drive security outcomes.

Skills

IAM

Cyber risk management

IT controls

Regulatory compliance

DevSecOps

Frontier AI

Education

Bachelor’s or Master’s in CS or related field

Job description

Technology | Wholesale Banking CISO / ISM | Associate, Information Security Engineer | New York

About ING :

In the Americas, ING's Wholesale Banking division offers a broad range of innovative financial products and services to domestic and international corporate and institutional clients.

When you come to work at ING, you're joining a team where individuality isn't just accepted, it's encouraged. We've built a culture that's fun, friendly and supportive - it's the kind of place where you can be yourself and make the most of whatever you have to offer.

We give people the freedom to take risks, think differently, take ownership of their work, and make great things happen. We're here to help you get ahead. And with our global network, there's plenty of scope to take your career in new directions, perhaps even ones you've never considered. ING Americas follows a hybrid work model, allowing for in-office / work from home flexibility. Hybrid work arrangements vary based on business area.

About the position:

The Information Security Governance Expert is responsible for overseeing day-to-day operations of Identity Access Management, Cyber risk management, IT Controls compliance, and control effectiveness across the organization. The role ensures that information security risks are identified, assessed, monitored, and reported while supporting adherence to ING policies, regulatory requirements, and industry standards.

About the department:

Wholesale Banking CISO/ ISM team as 1st line of defense drives WB-wide Information security and Cyber Security regulatory compliance, focuses on rolling out Security standards & procedures, facilitating training & awareness, Frontier AI, risk management, security advisory and vulnerabilities management.

The objective of the WB CISO/ISM team is to ensure executive and technical leadership and oversight of product security, operational technology, and initiatives. Provide vision and subject matter expertise necessary to manage information security risk to the organization to ensure business alignment, effective governance, operational efficiency, security monitoring and measurement.

Responsibilities:

• Drive implementation and continuous improvement of information security governance frameworks following the ING Risk Management practices.
• Perform cybersecurity Identity and access management risk assessments on High Privilege Access and control reviews across business and technology assets.
• Act as a team member supporting a change management business as usual and automation initiative by providing analysis or monitoring progress with guidance from WB CISO.
• Act as process group owner to conduct research on controls and processes to enable analysis of key themes and trends using primary data sources for quarterly risk opinion.
• Assist in assessing compliance with information security policies, regulatory requirements, and control standards.
• Track and report security findings, issues, exceptions, and remediation progress.
• Responsible for developing management reporting, dashboards, risk metrics, and governance updates.
• Collaborate with Technology, Risk, Compliance, Audit, Legal, and Business stakeholders to drive security outcomes.
• Implement required cyber security measures, such as IAM, CHM, 3rd party assessments and provide input on their design, monitoring performance to notify engineers experts of any problems.
• Support enterprise security initiatives, regulatory remediation programs, and strategic cybersecurity projects.
• Provide governance guidance for technology transformations, third‑party engagements, and new business initiatives.
• Promote a strong security and risk management culture across the organization.
• Experience with enterprise AI tools and governance.
• Act as IT Security team SME to align activities with 2nd line of defence and share content knowledge and provide pragmatic solutions for DevOps teams.
• Develop and mature the ING information security program, ensuring compliance with relevant regulations and standard methodologies and provide SME support Identity and access management.
• Liaison with the technical teams to ensure alignment between the security and business, thus coordinating the strategic/ tactical planning.
• Contribute as SME in the development, implementation, and maintenance of a strong information privacy and security program to meet ING risk appetite on quarterly basis.
• Manage IT security standards and procedures to ensure they are developed/updated/reviewed.
• Develop, implement, and maintain information security monitoring roadmap to align with firm KPI/KRI's.

Qualifications and Competencies

• Bachelor's or master's degree in computer science or a related field.
• 3+ years' experience in Information Security, Risk Management, Identity and Access Management, Cyber compliance, IT Audit, Dev Sec Ops, Frontier AI.
• CISM certification and Certified in Cyber Security (CC by ISC2), highl