About this role
The STA takes a senior leadership role in NFR NL, supporting the Head of NFR and working closely with the Head of ORM, Head of PMR and the AI risk manager in NFR NL. This is a special assignment across three focus areas: Replacing the Head of Information Risk Management (IRM) on an interim basis, with full accountability for the role. Acting as the local 2LoD lead for the Resilience 2.0 program. Ensuring programme risk management for cross country programs originating from ING NL is fit for purpose.
Roles and responsibilities Interim Head of Information Risk Management (Area 1)
• Assume full interim accountability for the Information Risk Management framework for ING NL, aligned with Group standards and regulatory expectations.
• Oversee key information risk domains, including IT risk, cyber risk, data risk and IT resilience, ensuring clear ownership and control effectiveness.
• Provide effective independent challenge to the 1st Line on the design and effectiveness of information risk controls.
• Advise senior management on risk‑based decision‑making related to technology, data and digital transformation.
• Ensure consistent application of risk taxonomy, methodologies and control standards.
• Provide clear, forward‑looking information risk insights to the Head of NFR NL, CRO NL, ExCo NL and NFRC NL.
• Strengthen the quality, consistency and actionability of risk reporting, metrics and dashboards.
• Ensure timely escalation and follow‑up when risk appetite thresholds are breached.
Regulatory & supervisory alignment
• Ensure compliance with applicable regulations and supervisory expectations (including DORA and ECB/DNB/AFM guidance).
• Translate regulatory developments into clear implications and actions for ING NL.
Local 2LoD lead for the Resilience 2.0 programme (Area 2)
• Act as the local 2LoD Defence lead for the Resilience 2.0 programme, providing independent challenge and guidance to ensure outcomes are delivered in line with project milestones.
• Shape and maintain with ODCR the local governance: define decision points, escalation routes, and reporting to relevant risk committees and management stakeholders. Involve other NFR staff in the project to execute.
• Align with ING NL stakeholders (COO, CIO, ODCR, ORM) on deliverables, provide 2LoD challenge on the programme planning and deliverables.
• Ensure the programme’s output aligns with regulatory expectations (e.g., DORA) and ING policies, including clear traceability from requirements to controls and evidence.
Programme risk management for cross‑country programmes (Area 3)
• ING NL is leading more and more programmes that are also consumed by other countries. Examples are Conversational Banking or Private Banking Luxembourg. In order to prevent double work or gaps, the requires strong alignment with Group NFR and NFR’s of the consuming countries. In this role you will set-up the NFR NL governance for cross country programmes, define roles and responsibilities of NFR NL, NFR Group and NFR’s of the consuming countries. You will also set-up the way of working between these parties.
• Ensure program risk management for cross‑country programmes originating by NFR NL is fit for purpose, consistent and embedded in delivery governance.
• Define and challenge minimum expectations for programme risk artefacts (risk assessments, control mapping, testing/evidence, risk acceptances) and ensure they are proportionate to materiality.
• Provide independent 2LoD challenge on programme milestones, key design decisions and delivery trade‑offs, ensuring risk is transparently understood and managed.
• Ensure timely escalation of critical risks/issues and follow‑up on agreed mitigations.
• Align stakeholders across countries and Group functions where needed, enabling consistent decisions and clear ownership for remediation actions.
Across all areas – Leadership & collaboration
• Provide strong interim leadership (people, priorities and delivery), fostering expertise, ownership and a robust risk culture.
• Build trusted partnerships with senior stakeholders in 1LoD and 2LoD, balancing independent challenge with pragmatic, outcome‑driven collaboration.
How to succeed We hire smart people like you for your potential. Our biggest expectation is that you’ll stay curious. Keep learning. Take on responsibility. In return, we’ll back you to develop into an even more awesome version of yourself.
We are looking for the following knowledge and experience:
• Master’s degree in Computer Science, Mathematics, Engineering, or equivalent.
• 5-10 years leadership experience in technology functions (1LoD) and ideally IT Risk Management (CISO or IRM functions).
• Extensive experience in information risk (IT/cyber/data/technology risk) within a regulated financial institution, with demonstrated accountability at senior leadership level.
• Strong understanding of supervisory expectations and regulation related to operational resilience and information risk (e.g., DORA, ECB/DNB/AFM guidance) and the ability to translate these into practical governance and controls.
• Proven ability to lead and influence across multiple stakeholders and countries, combining independent judgement with constructive challenge and collaboration.
• Demonstrated strength in programme / change risk management: assessing materiality, shaping risk governance, challenging delivery trade‑offs and driving timely mitigations.
• Excellent communication and stakeholder management skills, able to translate complex technical and delivery risks into clear business impact, options and decisions.
Rewards and benefits We want to make sure that it’s possible for you to strike the right balance between your career and your private life. Find out more about our employment conditions.
The benefits of working with us at ING include:
• 25-28 vacation days depending on contract
• Pension scheme
• 13th month salary
• 8% Holiday payment
• Hybrid working
• Personal growth and challenging work with endless possibilities
• An informal working environment with innovative colleagues
About us Curious about how ING empowers people and businesses to move forward? Discover what we do and what we can offer you.
Questions? Please visit our Frequently Asked Questions section to find some answers on questions you might have. If you're questions are not answered, you can also contact the recruiter attached to the advertisement. Want to apply directly? Please upload your CV and motivation letter by clicking the ‘Apply’ button.