ING Hubs Spain
Financial Services
GRCExpert
Neural analysis suggests this role is
optimal for Senior candidates.
“GRC Expert at ING Hubs Spain. Skills: GRC, Cybersecurity, Risk management, Compliance. Drive governance of cybersecurity issues. Oversee set-up of cybersecurity standards”
Industry & Context.
Risk analysis
What They're Looking For.
Must Have
M. Sc degree in computer science, M. Sc degree in information security, M. Sc degree in risk management, 6-10 years experience in information security, 6-10 years experience in risk management, Solid understanding of cybersecurity, Solid understanding of IT, Solid understanding of risk management, Knowledge of GRC frameworks, Knowledge of compliance standards, Affinity with managing policies, Affinity with managing KRIs, Affinity with risk reporting, Understanding of data analytics, Good communication skills, Improvement mindset, Innovation mindset, Ability to work in multi-cultural environment, Good presentation skills
Nice to Have
Experience in financial institution, Management experience, Proficiency in Dutch language
What You'll Do.
Drive governance of cybersecurity issues
Oversee set-up of cybersecurity standards
Maintain set-up of cybersecurity standards
Monitor compliance to regulatory standards
Monitor compliance to internal policies
Drive implementation of regulatory programs
Track regulatory obligations
Produce regulatory reports
Support questionnaires onsite inspections
Support internal maturity assessments
Support external maturity assessments
Ensure adherence to ECB guidelines
Map controls to regulatory expectations
Execute risk analyses on cybersecurity
Support governance on cyber risk
Support compliance on cyber risk
How You'll Work.
Team & Collaboration
Work with CISO functions; Work with CTO functions
Communication Scope
Verbal communication; Written communication; Presentation skills
Full Job Description
**At ING Hubs Spain we are looking for a GRC Expert** **Your role and work environment:** We are looking for a talented and enthusiastic **GRC Expert** to join our team at **ING Hubs Spain.** You will be part of a new team that is active in the fields of cybersecurity governance, regulatory compliance, horizon scanning and influencing new regulations. Furthermore, you will be performing risk analyses in support of governance and support operational resilience testing within ING. As the team will cover a broad set of activities and responsibilities, we are looking for flexible people with an IT and risk management basis that are eager to grow and learn. You will work together with a broad range of team within the CISO and CTO functions within the bank. **Your key responsibilities:** As a GRC Expert, you will: * Drive adequate governance of cybersecurity issues both for ING as Global CISO itself. * Help oversee proper set-up and maintenance of ING's standards in the field of cybersecurity. * Monitor and drive compliance of CISO to external regulatory standards and internal policies and standards. * Monitor and influence cybersecurity regulations and drive implementation of regulatory cybersecurity programs. * Track regulatory obligations producing regulatory reports. * Support audits – e.g., ECB audits and questionnaires onsite inspections, internal and external maturity assessments. * Help ensure adherence to ECB guidelines (e.g. DORA RTS, CRA). * Map controls to regulatory expectations. * Execute risk analyses on cybersecurity to support governance and compliance on cyber risk. **What are we looking for?** Want to know if this job is made for you? These are some of the qualities that we value the most for this role. And if the shoe fits… don’t hesitate to apply! * A M.Sc degree in computer science, information security, risk management or equivalent. * Work experience between 6 and 10 years of experience in information security, risk management in a larger instituti
Applying for this GRC Expert role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Workday
- Workday has a multi-step form — save your progress after every section.
- "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
- Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
- Job requisition numbers are useful when following up with HR by email.
ANONYMOUS · UNFILTERED
What do employees actually say about ING Hubs Spain?
Real rants from real employees. Read before you apply.