Cloud & Risk Governance Manager

When you come to work at ING, you’re joining a modern and progressive team where individuality isn’t just accepted, it’s encouraged. You’ll be surrounded by people who are friendly, inclusive and respectful, who want you to reach your potential. It’s one of the many reasons we’re proud to be an Employer of Choice for Gender Equality.

As our Cloud and Risk Governance Manager, reporting into the Senior Manager, Technology Risk in Change CoE Lead, you’ll be a key contributor to ING’s organisational strategy, and provide governance over 2 key areas: 1. Cloud Risk Board (CRB) Forum to support the completion of key risk deliverables for public cloud workloads in adherence to the ING Bank (Australia) Limited (IBAL) Cloud Migration Framework, Non-Financial Risk Management Framework (NFR) and the Australian Prudential Regulation Authority (APRA) “Information Paper on Outsourcing Involving Cloud Computing 2. Risk In Change Governance to service key Technology projects and programs of work

You’ll have a deep understanding of technology practices and processes in the financial services industry particularly in Cloud, application of governance capabilities for Cloud and are familiar with leading frameworks supporting pre-production activities as it related to Cloud workloads. You’ll have a solid understanding of the regulatory landscape in Australia as it relates to Cloud migrations.

You’ll thrive in this role if you develop deep stakeholder management and engagement, with the ability to work collaboratively at all levels to influence change, applying strategic and operational business approaches to achieve balanced risk management outcomes. In this role, the Cloud and Risk Governance Manager will provide effective governance by fostering an environment that encourages accountability, integrity, personal growth, and commitment to a customer centric culture.

Ready to make an impact?

What you’ll do 

• Run the Cloud Risk Board (CRB) Forum to enforce ING requirements for workloads moving into Cloud, new assets created in Cloud and outsourced/ third party applications in Cloud
• Collaborate with cross-functional teams to establish governance frameworks and standards for cloud adoption, encompassing risk assessment, compliance monitoring, and incident response protocols
• Facilitate the implementation of risk-based decision-making processes to evaluate cloud service providers, assess potential threats and vulnerabilities, and prioritize risk treatment strategies
• Monitor changes in regulatory requirements, industry trends, and emerging threats relevant to cloud computing, and assess their impact on risk management practices and governance frameworks
• Coordinate with APRA compliance teams to identify trigger points for regulatory notifications, develop notification procedures, and ensure timely reporting of significant cloud-related events or incidents
• Maintain documentation and evidence of compliance efforts, including risk assessments, control assessments, and audit findings, to support regulatory inquiries, internal reviews, and external assessments
• Create and maintain the Cloud Risk Register that maintains a list of public cloud workloads recording the progress and outcome of risk assessments as per the IBAL Non-Financial Risk Management Framework

What we’re looking for 

• Ability to acquire technical understanding of the IT environment, including its architectural direction for all things related to Cloud, in order to be able to Govern and provide relevant advice
• Ability to run Governance forums attended by Senior Stakeholders and be able to leverage different teams to get sound outcomes
• Understanding of relevant regulatory requirements, notifications and able to remain current with knowledge of changing requirements
• Working experience of reviewing APRA letters, solid understanding of APRA information paper ‘Outsourcing involving cloud computing services’
• Understanding of relevant Cloud technologies and able to remain current with knowledge of Cloud Computing: Microsoft Azure
• A minimum of 6+ years Non-Financial Risk related experience or equivalent combination of education and experience, of which at least 3 years has been related to Cloud technologies. Demonstrated ability to breathe new life into organisation ― to revitalise ways of thinking, behaving and working, whilst keeping an eye on employee satisfaction across the organisation
• Previous Cloud or Technology Change Governance experience in managing organization-wide Technology changes
• Knowledge of Banking and relevant External Regulations, processes, procedures and systems
• Ability to deal with ambiguity in a fast paced technology environment whilst ensuring Technology changes and Cloud governance is managed appropriately

What’s in it for you?

• Discounted ING Health Insurance 
• An additional Rest Day to support your wellbeing 
• An IMPACT day to volunteer on an approved sustainability activity 

About Us 
 
At ING, we want to make life simpler and more worthwhile – for everyone who banks with us, for the people who work with us, and the community at large, too. 
 
When you come to work at ING, you’re joining a team where individuality isn’t just accepted, it’s encouraged. We’ve built a culture that’s fun, friendly and supportive – it’s the kind of place where you can be yourself and make the most of whatever you have to offer. 
 
We give people the freedom to think differently, take ownership of their work, and make great things happen. We’re here to help you get ahead. And with our global network, there’s plenty of scope to take your career in new directions, perhaps even ones you’ve never considered. 
 
We are all about celebrating success and as a result we are proud to be a WGEA Employer of Choice for Gender Equality and a certified Family Inclusive workplace.  
 
Sound like the kind of place you’d feel at home? We’d love to hear from you. 
 
(One last thing, ING operates a direct talent sourcing model. So no agency introductions, please.) 

Need more? 
Contact Mark Montgomery on mark.montgomery@ing.com

Applications close Friday 6th December 2024

#LI-DNI