Key Skills

Job Description

Do you want to shape how one of Europe’s leading banks manages cyber and information security risk? As Head of Cyber Risk Management, you will play a pivotal role in driving ING’s cyber risk strategy, influencing executive decision-making, and strengthening resilience across the bank. This is a highly visible leadership position within the Global CISO organisation, offering the opportunity to work closely with senior leadership, regulators, and the Board on one of the most critical topics facing the financial industry today. The Team You will join the Global CISO organisation and report directly to the Global Head of GRC & Data. The Cyber Risk Management function is responsible for establishing and driving the first-line cyber and information security risk strategy across ING globally. The function brings together Third-Party Cyber Risk Management, Business Continuity & IT Risk, and specialist cyber risk assessment capabilities, comprising approximately 40 professionals. Working at the intersection of Security, Technology, Risk and Compliance, the team provides independent challenge, risk insight and strategic guidance to ensure ING maintains a strong and regulator-ready cyber risk posture. You will partner closely with the Global CISO leadership team, the IT & Cyber Risk Centre of Excellence, the CRO organisation, Compliance and Internal Audit. Roles And Responsibilities As Head of Cyber Risk Management, you will lead the development and execution of ING’s cyber and information security risk strategy while ensuring strong alignment with the bank’s overall risk framework and regulatory obligations. Your Responsibilities Include Defining and evolving ING’s global Cyber and Information Security Risk Strategy and supporting the bank’s cyber risk appetite framework. Leading a global team responsible for cyber risk management, risk assessments, governance, metrics, and third-party cyber risk oversight. Driving enterprise-wide cyber risk initiatives that strengthen resilience and enable safe business growth. Providing strategic challenge and guidance on material cyber risk decisions, investments and prioritisation across the organisation. Partnering with senior stakeholders across Technology, Risk, Compliance and Internal Audit to create a consistent and integrated risk approach. Overseeing the development of meaningful cyber risk metrics, reporting and risk insights to support executive and Board-level decision-making. Representing the Global CISO organisation in engagements with regulators and external auditors, ensuring a strong and credible risk management posture. Ensuring effective governance and escalation of cyber risks, including risks that exceed the bank’s defined appetite. Driving the continued maturity of Third-Party Cyber Risk Management and the global information security contract governance framework. Building a culture of accountability, transparency and risk-based decision-making across the global security organisation. How To Succeed We hire smart people like you for your potential. Our biggest expectation is that you’ll stay curious. Keep learning. Take ownership. In return, we’ll support your growth into an even stronger leader. To Succeed In This Role, You Bring Master’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field. Extensive leadership experience in cyber risk management, information security, operational risk or a related discipline within a large and complex organisation. A proven ability to influence executive stakeholders, Board-level audiences and regulators on strategic risk and control topics. Deep knowledge of cyber risk management practices and regulatory frameworks such as DORA, ECB expectations, NIS2, EBA ICT Guidelines and related banking regulations. Professional certifications such as CISSP, CRISC, CISM, FAIR, or CGEIT preferred. Demonstrated experience in developing enterprise-wide risk strategies, governance frameworks and risk appetite approaches. Strong analytical capabilities with the ability to translate complex technical risks into clear business and strategic consequences. A leadership style that inspires high-performing teams and fosters collaboration across diverse stakeholders and geographies. Excellent written and verbal communication skills in English. Experience within a highly regulated environment (e.g., financial services, critical infrastructure, telecommunications, healthcare, or similar) is considered a strong advantage. Rewards And Benefits We want to make sure that it’s possible for you to strike the right balance between your career and your private life. Find out more about our employment conditions. The Benefits Of Working With Us At ING Include 25-28 vacation days depending on contract Pension scheme 13th month salary 8% Holiday payment Hybrid working Personal growth and challenging work with endless possibilities An informal working environment with innovative colleagues About Us Curious about how ING empowers people and businesses to move forward? Discover what we do and what we can offer you. Questions? Please visit our Frequently Asked Questions section to find some answers on questions you might have. Contact the recruiter attached to the advertisement. Want to apply directly? Please upload your CV and motivation letter by clicking the ‘Apply’ button.

Core Responsibilities

Lead ING’s global cyber and information security risk strategy, managing a global team responsible for risk assessments, governance, metrics, and third-party cyber risk oversight. Advise senior leaders and the Board, engage with regulators and auditors, and strengthen cyber resilience, risk escalation, and accountability across the bank.

Requirements

A master’s degree in cybersecurity, computer science, information technology, engineering, or a related field is required, along with extensive leadership experience in cyber risk, information security, operational risk, or a related discipline. Candidates should bring deep knowledge of relevant banking regulations, experience influencing executives and regulators, and strong strategic, analytical, communication, and team leadership skills; certifications such as CISSP, CRISC, CISM, FAIR, or CGEIT are preferred.

Benefits

• 25–28 Vacation Days
• Pension Scheme
• 13th Month Salary
• 8% Holiday Payment
• Hybrid Working
• Personal Growth Opportunities
• Challenging Work
• Informal Working Environment