Associate, IT Governance Specialist

ing; United States; Hybrid; USD 100,000 - 150,000; Full time

Job summary

ING Americas Technology is seeking an Associate, IT Governance Specialist in New York to coordinate TIPM activities for IT Infrastructure services. The role operates in the 1LoD and ensures compliance with governance standards and controls across pre- and post-contracting phases.

You will lead governance, risk assessments, and service reviews, coordinating with IT Owners, Procurement, Legal, ORM, CISO, and Finance to evidence controls and regulatory compliance.

Qualifications

• Bachelor's degree in IT, Risk Management, Finance, or related field.
• 3+ years of relevant experience.
• Experience in regulated banking environments preferred.
• Related certifications preferred, e.g. Certified Third-Party Risk Professional (CTPRP).

Responsibilities

• TIPM Governance & Lifecycle Coordination: Execute governance activities and ensure arrangements are assessed, approved, registered and managed across the full lifecycle, including pre-contracting due diligence, in-life governance, and exit readiness.
• Control Execution & Compliance: Plan and execute TIPM control requirements including third-party cybersecurity and business continuity evaluations; coordinate risk assessments, support baseline and due diligence activities, and perform control monitoring.
• Service Review Management: Organize and facilitate regular Service Review Meetings (SRM) and Strategic Service Reviews (SSR) for critical and non-critical service arrangements.
• Third Party Assurance & Risk Oversight: Coordinate assurance report reviews, cyber and operational risk monitoring activities, and follow through on issue remediation and risk mitigation actions with relevant stakeholders.
• Contract & Lifecycle Support: Coordinate contracting activities, support pre-contracting due diligence, maintain in-life governance, and ensure operational and contractual considerations are addressed through transition and exit phases.
• Data Management & Reporting: Maintain TIPM registers, reporting, and audit evidence.
• Regulatory & Policy Alignment: Define and implement processes to ensure compliance with TIPM policy, TPCRM / ITRS requirements, FFIEC, NYDFS, DORA, and other relevant internal standards and regulatory expectations.

Skills

TIPM knowledge

IT governance

Vendor management

Cross-functional coordination

Audit readiness

Risk frameworks

Education

Bachelor's degree in IT or related field

Job description

Americas Technology | Infrastructure Technology | Associate, IT Governance Specialist | New York

About ING :

In the Americas, ING's Wholesale Banking division offers a broad range of innovative financial products and services to domestic and international corporate and institutional clients.

When you come to work at ING, you're joining a team where individuality isn't just accepted, it's encouraged. We've built a culture that's fun, friendly and supportive - it's the kind of place where you can be yourself and make the most of whatever you have to offer.

We give people the freedom to take risks, think differently, take ownership of their work, and make great things happen. We're here to help you get ahead. And with our global network, there's plenty of scope to take your career in new directions, perhaps even ones you've never considered. ING Americas follows a hybrid work model, allowing for in-office / work from home flexibility. Hybrid work arrangements vary based on business area.

Sound like the kind of place you'd feel at home? We'd love to hear from you.

About the position:

The IT Service Provider Governance Specialist is responsible for coordinating and executing Third Party and Intragroup Party Management (TIPM) activities on behalf of IT Service and Contract Owners, with a focus on Americas IT Infrastructure services. The function of this role is to ensure compliance with ING TIPM policy, risk control standards, and governance requirements including both pre-contracting due diligence and post-contracting oversight.

About the department:

The role operates within the First Line of Defense (1LoD) and helps ensure that service arrangements are properly defined and governed, controls are implemented and evidenced, and service review, continuous monitoring, remediation tracking, and reporting obligations are fulfilled to support secure service delivery, operational resilience, and regulatory compliance.

The role acts with and on behalf of IT Service / Contract Owners. Accountability remains with the Service Owners.

Responsibilities:

• TIPM Governance & Lifecycle Coordination: Execute governance activities and ensure arrangements are assessed, approved, registered and managed across the full lifecycle, including pre-contracting due diligence, in-life governance, and exit readiness.
• Control Execution & Compliance: Plan and execute TIPM control requirements including third-party cybersecurity and business continuity evaluations; coordinate risk assessments, support baseline and due diligence activities, and perform control monitoring. Gather and assess vendor risk control evidence.
• Service Review Management: Organize and facilitate regular Service Review Meetings (SRM) and Strategic Service Reviews (SSR) for critical and non-critical service arrangements.
• Third Party Assurance & Risk Oversight: Coordinate assurance report reviews, cyber and operational risk monitoring activities, and follow through on issue remediation and risk mitigation actions with relevant stakeholders.
• Contract & Lifecycle Support: Coordinate contracting activities, support pre-contracting due diligence, maintain in-life governance, and ensure operational and contractual considerations are addressed through transition and exit phases.
• Data Management & Reporting: Maintain TIPM registers, reporting, and audit evidence.
• Regulatory & Policy Alignment: Define and implement processes to ensure compliance with TIPM policy, TPCRM / ITRS requirements, FFIEC, NYDFS, DORA, and other relevant internal standards and regulatory expectations.

Key Stakeholder Engagement

Coordinate and maintain close communication with stakeholders including IT Service Owners / Application Owners, Procurement (Global and Americas), Legal / Contracting, Operational Risk Management (ORM / NFR), CISO / IT Risk, Finance / Vendor Management, ODCR TIPM, and external third parties and intragroup providers.

Qualifications and Competencies

• Bachelor's degree in IT, Risk Management, Finance, or related field
• 3+ years of relevant experience
• Experience in regulated banking environments preferred
• Related certifications preferred, e.g. Certified Third-Party Risk Professional (CTPRP)

Required Competencies

• Knowledge of TIPM, TPCRM, outsourcing, and third-party risk frameworks, including control standards, assessments, and supporting guidance
• Experience in IT governance, vendor management, or operational risk
• Ability to coordinate cross-functional stakeholders
• Strong attention to detail and audit readiness
• Risk awareness and structured problem-solving
• Understanding of secure service delivery, operational resilience, continuous monitoring, and remediation tracking in regulated environments

Sample Success Criteria

• Complete and accurate TIPM register
• Clear definition of Key Performance Indicators and Service Level Agreements for third-party and intracompany services
• Timely execution of Service Review Meetings, Strategic Service Reviews, Risk Control Self Assessments
• Reduction in con