Associate, Information Security Engineer

ING•New York, NY

3d•$85,000 - $110,000•Hybrid

About The Position

The Information Security Governance Expert is responsible for overseeing day-to-day operations of Identity Access Management, Cyber risk management, IT Controls compliance, and control effectiveness across the organization. The role ensures that information security risks are identified, assessed, monitored, and reported while supporting adherence to ING policies, regulatory requirements, and industry standards.

Requirements

Bachelor’s or master’s degree in computer science or a related field.
3+ years’ experience in Information Security, Risk Management, Identity and Access Management, Cyber compliance, IT Audit, Dev Sec Ops, Frontier AI.
Familiar with non-financial risk models and threat assessments.
Proven analytical ability to solve complex business and technical problems, critical thinker able to level, communicate and educate on both Senior Management and other SMEs in information technology teams.
Poise and the ability to act calmly and competently in high-pressure, high-stress situations.
Abreast on new tools and technologies related to information security.
Demonstrated experience with various information security controls, including integration with secure IAM tooling’s, systems security, encryption systems, and application security.
Like to continuously develop your (technical) expertise and knowledge
Like to work as an independent professional, i.e., be pro-active, have high-quality standards and work according to the planning.
Like to interact with Information Security Specialists and Senior Management to build strong relationships.
A critical, though positive constructive mind set, accurate and thorough., connect self-reflection and action.
Deep knowledge and experience with security and regulatory compliance as well as external audits.
Prepared to challenge the program and Information security 2nd line of defence and have the "difficult conversations” where needed in the interests of ING policies & standards.

Nice To Haves

CISM certification and Certified in Cyber Security (CC by ISC2), highly preferred.

Responsibilities

Drive implementation and continuous improvement of information security governance frameworks following the ING Risk Management practices.
Perform cybersecurity Identity and access management risk assessments on High Privilege Access and control reviews across business and technology assets.
Act as a team member supporting a change management business as usual and automation initiative by providing analysis or monitoring progress with guidance from WB CISO.
Act as process group owner to conduct research on controls and processes to enable analysis of key themes and trends using primary data sources for quarterly risk opinion.
Assist in assessing compliance with information security policies, regulatory requirements, and control standards.
Track and report security findings, issues, exceptions, and remediation progress.
Responsible for developing management reporting, dashboards, risk metrics, and governance updates.
Collaborate with Technology, Risk, Compliance, Audit, Legal, and Business stakeholders to drive security outcomes.
Implement required cyber security measures, such as IAM, CHM, 3rd party assessments and provide input on their design, monitoring performance to notify engineers experts of any problems.
Support enterprise security initiatives, regulatory remediation programs, and strategic cybersecurity projects.
Provide governance guidance for technology transformations, third-party engagements, and new business initiatives.
Promote a strong security and risk management culture across the organization.
Experience with enterprise AI tools and governance.
Act as IT Security team SME to align activities with 2nd line of defence and share content knowledge and provide pragmatic solutions for DevOps teams.
Develop and mature the ING information security program, ensuring compliance with relevant regulations and standard methodologies and provide SME support Identity and access management.
Liaison with the technical teams to ensure alignment between the security and business, thus coordinating the strategic/ tactical planning.
Contribute as SME in the development, implementation, and maintenance of a strong information privacy and security program to meet ING risk appetite on quarterly basis.
Manage IT security standards and procedures to ensure they are developed/updated/reviewed.
Develop, implement, and maintain information security monitoring roadmap to align with firm KPI/KRI’s.