Information Risk Specialist (Cybersecurity)

Location: Bucharest, Romania — Dacia One

Employment type: Full time

Company

hirify.global Romania provides software development, data management, non-financial risk and compliance, audit, and retail operations services to ING units worldwide.

What you will do

• Provide independent second-line oversight and constructive challenge on IT, information, and operational resilience risks.
• Review risk assessments and mitigation plans for completeness, quality, and alignment with risk frameworks.
• Oversee the implementation and effectiveness of key risk and control frameworks.
• Coordinate risk and control reporting, monitor remediation actions, and escalate project-related risks when needed.
• Perform thematic reviews, deep dives, and data-driven analyses to identify trends, gaps, and improvement areas.
• Partner with business and IT stakeholders by providing clear, actionable guidance and supporting informed risk decisions.

Requirements

• University or postgraduate degree.
• 3+ years of professional experience, preferably in banking and/or IT audit.
• Experience with non-financial risk management frameworks, governance, methodology, processes, controls, and relevant EBA or ECB regulations.
• Experience with information and technology risk policies and internal control standards, including identity and access management, cyber, data, AI, and emerging technologies.
• Strong analytical skills, attention to detail, and clear stakeholder communication.
• Ability to challenge constructively, balance risk awareness with business needs, and collaborate across teams.

Culture & Benefits

• Flexible way of working in a highly collaborative environment.
• Constructive feedback and knowledge sharing are encouraged.
• Opportunity to work with teams across ING's global organization.