Senior IT Risk Officer

Job Overview

• The IT Risk Lead is a critical member of the Local IT Team at ING Hubs Philippines, focused on ensuring robust IT Risk Controls within the entity. This role is integral to the 1st line of defense, interacting closely with local teams, business units and various stakeholders. Reporting directly to the Head of IT, the IT Risk Lead will be responsible for safeguarding the organization’s IT landscape by driving compliance with IT Risk frameworks and ING’s Global Policies.

Key Responsibilities

• Lead IT Risk Management: Spearhead all IT Risk activities within the entity, ensuring adherence to the IT Risk Framework and driving the implementation of risk controls across various teams.
• Collaboration with Defense Lines: Work closely with the 2nd Line of Defense to ensure comprehensive compliance with IT Risk Controls, facilitating seamless collaboration between teams.
• Risk Assessment and Analysis: Gather, Analyze, and Report on IT Risk data related from different entity assets, providing actional insights and recommendations for risk mitigation.
• Policy Interpretation and Implementation: Interpret and operationalize ING’s IT policies and minimum standards, ensuring they are effectively implemented across the organization.
• Reporting and Documentation: Prepare and deliver detailed reports, opinions, and analysis related to IT Risk, ensuring clear communication of risk status and mitigation strategies to stakeholders.
• Stakeholders Engagement: Engage with various departments and counterparts to address and resolve IT risk concerns, fostering a culture of proactive risk management.
• Continuous Improvement: Continuously evaluate and enhance IT risk management practices, ensuring they remain aligned with evolving business needs and regulatory requirements.

Key Capabilities/Experience

• Extensive IT Risk Knowledge: Demonstrate experience in IT Risk Management, with strong understanding of IT Risk Frameworks and best practices.
• Cross-Functional Collaboration: Proven ability to work effectively with multiple teams and stakeholders.
• Risk Analysis and Reporting: Strong analytical skills with the ability to distill complex risk data into clear, actionable reports and recommendations.
• Policy Implementation: Experience in interpreting and applying organizational policies within a complex IT environment.
• Communication Skills: Exceptional verbal and written communication skills, with the ability to convey technical risk concepts to non-technical stakeholders.
• Attention to Detail: Strong attention to detail and accuracy in Risk Assessment and Reporting

Minimum Qualifications

• Educational Background: Bachelor’s degree in information technology, Computer Science, or a related field.
• Experience: Minimum of 5 years of work experience in IT Risk Management or a related role, with at least 2 years in a similar capacity.
• Technical Knowledge: Strong understanding of IT Risk Frameworks and Risk Management practices. Knowledge of IT Service Management (ITSM) is a plus.
• Problem-Solving Skills: Ability to identify potential risk and develop effective solutions to mitigate them.
• Stakeholder Engagement: Proven experience in managing relationships with various stakeholders, including senior management and external auditors.
• Certifications: Relevant certifications such as CRISC, CISM, or CISSP is a plus.