IT Risk Management Expert (Non-Financial Risk)

Location: Madrid, Spain. Hybrid work model with days worked from home and days at the ING MAD office determined jointly.

Company

hirify.global Spain is a global technology and operations hub that designs and delivers scalable, fast, and secure solutions supporting ING banking services in more than 38 countries.

What you will do

• Advise IT and business management and Non-Financial Risk specialists from an independent second-line perspective.
• Deliver strategic and ad-hoc IT risk analyses, management reports, research, evidence collection, and actionable insights.
• Review and report on risks across strategic IT programmes, projects, technology developments, and the IRM community.
• Develop and maintain IT risk frameworks, policies, standards, procedures, methods, and techniques.
• Identify emerging technology trends, cyber threats, regulatory developments, and supervisory expectations, translating them into priorities and improvement proposals.
• Use data analytics, visualisation, Power BI, Power Automate, and other automation or emerging technologies to improve risk reporting and decision-making.

Requirements

• Strong experience in Information & Technology Risk Management and understanding of IT governance, IT processes, infrastructure, cloud, data, third-party risk, and IT resilience.
• Understanding of cybersecurity risk, including cyber threats and vulnerabilities, identity and access management, security by design, cloud security, change management, and incident management.
• Experience with risk identification and assessment, prioritisation, control assessment, monitoring, reporting, and applying risk frameworks, policies, and standards.
• Ability to provide constructive challenge from an independent second-line risk perspective while building trusted relationships with risk, business, and technology stakeholders.
• Ability to work across local and global environments and collaborate across functions, countries, and seniority levels.
• Strong data analytics skills and ability to turn complex risk data into meaningful insights, trends, and management information.
• Ability to translate complex technology and cyber topics into clear business impact and actionable insights for senior stakeholders.
• Critical thinking, professional scepticism, creativity, curiosity, and an improvement-oriented mindset with a proactive approach to practical solutions.

Nice to have

• Experience with Power BI.
• Experience with Power Automate or similar workflow automation tools.
• Experience with Artificial Intelligence, AI risk management, or the risk implications of AI-enabled technologies.

Culture & Benefits

• Flexible hybrid working with shared accountability for deciding home and office days.
• Health insurance for the employee and family, life insurance, and a pension plan available after one month.
• Restaurant card, transport allowance, and flexible remuneration for services such as nursery, transport, and training.
• Office facilities include electric mobility solutions, a doctor, hairdresser, gym, and personal-services support.
• International, collaborative, agile, tech-first environment focused on continuous learning, inclusion, sustainability, and customer value.