IT Security Officer - IAM Expert (IAM)

Location: Luxembourg (Siège Lux House)

Company

hirify.global supports ING’s technology, information security, risk and control activities in a banking environment.

What you will do

• Own and coordinate local IAM governance and controls with the IAM Centre of Excellence, technology teams and control owners.
• Implement, monitor and improve IAM controls in line with ING Group standards, SOX requirements and local obligations.
• Perform first-line monitoring, KCT and SOX testing, including evidence review, documentation and control-effectiveness assessment.
• Analyze IAM risks, control gaps and recurring access issues; identify root causes, track remediation, validate closure and escalate material issues.
• Advise technology and business stakeholders on IAM requirements, access-control questions and exceptions.
• Support broader IT security governance, risk assessments, security reviews, incident analysis, audit and regulatory activities.

Requirements

• Master’s degree in information security, computer science, risk management or a related field, or equivalent professional experience.
• At least five years of relevant experience in IAM, IT security, IT risk, internal controls or technology assurance, including independent ownership of IAM governance or control activities.
• Functional knowledge of joiner-mover-leaver processes, access provisioning, privileged access, periodic access reviews, segregation of duties, authentication and authorization controls.
• Thorough technical understanding of identity governance, privileged access management, directory services, authentication and access-certification platforms.
• Ability to interpret policies, standards and regulatory requirements and translate them into practical control expectations and actions.
• Hands-on experience in control design or testing, evidence assessment, deficiency management and remediation.
• Strong ownership, planning, coordination, analytical, communication and stakeholder-management skills, including the ability to manage recurring control activities and challenge constructively.
• Rigorous, evidence-based and audit-focused approach, with a collaborative, pragmatic and delivery-focused mindset.
• Fluent written and spoken English.

Nice to have

• Working knowledge of French.
• Experience with SOX IT general controls or comparable assurance requirements, preferably in financial services.
• Knowledge of ISO 27001, NIST Cybersecurity Framework, COBIT and DORA.
• Relevant certification such as CISA, CISM, CISSP, CRISC, CGEIT or ISO 27001 Lead Auditor.
• Experience working with central expertise and assurance functions, local and international teams, auditors and other assurance functions.

Culture & Benefits

• Work in a fast-changing and complex environment focused on technology-driven banking.
• Collaborate with Technology, Information Risk Management, the IAM Centre of Excellence, CIO management and other ING entities.
• Work in a team where security officers support one another across IT risk domains.
• Contribute ideas, challenge the status quo and support shared delivery goals.