IT Governance & Third-Party Risk Specialist – Hybrid

ING Americas; New York (NY); Hybrid; USD 89,000 - 113,000; Full time

Benefits offered by this job

Adoption benefits

Surrogacy assistance

Fertility services

Student debt assistance

Commuting subsidies

Fitness subsidies

Job summary

ING Americas is seeking an Associate, IT Governance Specialist in New York to coordinate TIPM activities for Americas IT Infrastructure services. You will ensure compliance with TIPM policy, risk controls, and governance requirements from pre-contract due diligence through post-contract oversight.

The role sits in a First Line of Defense framework, partnering with Service Owners and stakeholders across IT and Procurement to maintain governance, evidence, and reporting while supporting regulatory

Qualifications

• Bachelor’s degree in IT, Risk Management, Finance, or related field.
• 3+ years of relevant experience.
• Experience in regulated banking environments preferred.
• Certifications such as CTPRP preferred.

Responsibilities

• TIPM governance, lifecycle coordination across pre-contracting to exit.
• Plan and execute TIPM control requirements including cybersecurity and BCM assessments.
• Organize and facilitate Service Review Meetings (SRM) and Strategic Service Reviews (SSR).
• Coordinate assurance report reviews, risk monitoring, and remediation actions.
• Support contracting activities and in-life governance through transition and exit phases.
• Maintain TIPM registers, reporting, and audit evidence.
• Define processes to ensure compliance with TIPM, TPCRM, FFIEC, NYDFS, and other standards.

Skills

TIPM knowledge

IT governance

Vendor management

Cross-functional coordination

Audit readiness

Regulatory risk

Education

Bachelor’s degree in IT, Risk Management, Finance, or related field

Tools

CTPRP Certification

Job description

ING Americas is seeking an Associate, IT Governance Specialist in New York to coordinate TIPM activities for Americas IT Infrastructure services. You will ensure compliance with TIPM policy, risk controls, and governance requirements from pre-contract due diligence through post-contract oversight.

The role sits in a First Line of Defense framework, partnering with Service Owners and stakeholders across IT and Procurement to maintain governance, evidence, and reporting while supporting regulatory