Associate, IT Governance Specialist

ING•New York, NY

6d•$89,000 - $113,000•Hybrid

About The Position

The IT Service Provider Governance Specialist is responsible for coordinating and executing Third Party and Intragroup Party Management (TIPM) activities on behalf of IT Service and Contract Owners, with a focus on Americas IT Infrastructure services. The function of this role is to ensure compliance with ING TIPM policy, risk control standards, and governance requirements including both pre-contracting due diligence and post-contracting oversight.

Requirements

Bachelor’s degree in IT, Risk Management, Finance, or related field
3+ years of relevant experience
Knowledge of TIPM, TPCRM, outsourcing, and third-party risk frameworks, including control standards, assessments, and supporting guidance
Experience in IT governance, vendor management, or operational risk
Ability to coordinate cross-functional stakeholders
Strong attention to detail and audit readiness
Risk awareness and structured problem-solving
Understanding of secure service delivery, operational resilience, continuous monitoring, and remediation tracking in regulated environments

Nice To Haves

Experience in regulated banking environments preferred
Related certifications preferred, e.g. Certified Third-Party Risk Professional (CTPRP)

Responsibilities

Execute governance activities and ensure arrangements are assessed, approved, registered and managed across the full lifecycle, including pre-contracting due diligence, in-life governance, and exit readiness.
Plan and execute TIPM control requirements including third-party cybersecurity and business continuity evaluations; coordinate risk assessments, support baseline and due diligence activities, and perform control monitoring. Gather and assess vendor risk control evidence.
Organize and facilitate regular Service Review Meetings (SRM) and Strategic Service Reviews (SSR) for critical and non-critical service arrangements.
Coordinate assurance report reviews, cyber and operational risk monitoring activities, and follow through on issue remediation and risk mitigation actions with relevant stakeholders.
Coordinate contracting activities, support pre-contracting due diligence, maintain in-life governance, and ensure operational and contractual considerations are addressed through transition and exit phases.
Maintain TIPM registers, reporting, and audit evidence.
Define and implement processes to ensure compliance with TIPM policy, TPCRM / ITRS requirements, FFIEC, NYDFS, DORA, and other relevant internal standards and regulatory expectations.
Coordinate and maintain close communication with stakeholders including IT Service Owners / Application Owners, Procurement (Global and Americas), Legal / Contracting, Operational Risk Management (ORM / NFR), CISO / IT Risk, Finance / Vendor Management, ODCR TIPM, and external third parties and intragroup providers.