Information Risk Manager
Core
Provide independent second-line oversight, challenge, and advice on Technology Risk, Data Risk governance, policies, and risk appetite within a banking environment.
Role type
Senior IC Information Risk Manager (Technology & Data)
Builds
Risk governance frameworks, control effectiveness assessments, and regulatory compliance strategies for ING's technology and data domains.
Domain
Financial Services / Banking / Technology Risk / Information Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Technology risk management, Information security risk, Operational risk, Compliance auditing, Regulatory standards knowledge (APRA CPS 220/230/234), Stakeholder influence, Risk assessment, Control testing, Emerging risk monitoring
Preferred skills
CISA, CISM, CRISC certifications, Experience with operational resilience, Third-party risk management, AI-related risk assessment
Technologies
CPS 220, CPS 230, CPS 234, APRA prudential standards
Responsibilities
Review and challenge risk assessments and control effectiveness across technology and data domains; Conduct deep dives and thematic reviews to assess risk management practices; Monitor emerging risks including cyber, technology, and AI-related risks; Partner with stakeholders to ensure compliance with regulatory requirements; Support major business and transformation initiatives with expert risk advice; Build relationships to promote a positive risk culture
Seniority
Senior, hands-on IC