Risk Data Management Specialist @ING Hubs Romania

 Discover ING Hubs Romania  

ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of over 2000 high-performing engineers, risk, and operations professionals.  

We started out in 2015 as ING’s software development hub, then steadily expanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities and operate from two locations: Bucharest and Cluj-Napoca.  

Our tech capabilities remain the core of our business, with more than 1800 colleagues active in Data and Analytics Tech, Tech Foundation and Channels, Retail Core Banking and Architecture, and Global Products and Technology Services.  

We enjoy a flexible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.   

For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things and they love doing it in good company. Do you?   

The Mission 

The NFR Hubs Romania team is an integral part of ING’s Non-Financial Risk domain. The team is responsible for ensuring consistent implementation of NFR frameworks, policies, and procedures, while fostering a collaborative and high-performing environment within the hubs.  

The Data Risk NFR Specialist is part of the Center of Expertise (CoE) Data Management Risk team within the Non-Financial Risk (NFR) domain. This team focuses on identifying, managing, and mitigating risks related to data governance, data risk, data quality, data integrity, and data privacy, guiding policy setting and RAS metrics for data-related risks, supporting ING’s global risk management objectives. 

The role will report hierarchically to the Lead of Information & Technology Risk in Hubs Romania and functionally to Global Lead of ITR Team II located in Amsterdam, The Netherlands. 

Your day to day 

• Helps identify, measure, and reduce risks connected to data management and related technologies; 

• Assists in analyzing events and incidents to find weaknesses in how data is managed and in IT systems; 

• Supports the creation and review of data management policies to help ensure compliance with regulations; 

• Monitors the implementation of controls and remediation plans, and helps challenge risk acceptance decisions; 

• Participates in independent risk assessments and reviews how effective controls are; 

• Helps review incident response reports and root cause analysis findings; 

• Assists in reviewing and reporting Key Risk Indicators (KRIs); 

• Supports NFR teams with data risk analysis, oversight, and reporting activities; 

• Provides input to senior management on data management risks and possible mitigation steps; 

• Keeps up to date with new data risk regulations and industry best practices. 

Specific Tasks  

• Assist with analyzing data management events and incidents to help identify risks and improvement areas; 

• Support the development and review of data management policies to ensure they meet regulatory requirements; 

• Help monitor risk controls and track the progress of remediation plans; 

• Participate in independent risk assessments and help review the effectiveness of controls; 

• Contribute to the review of incident response reports and root cause analysis findings; 

• Help review and update Key Risk Indicators (KRIs) for data management; 

• Provide support to NFR teams with oversight and reporting activities related to data risk; 

• Offer input to senior management and 1LoD teams regarding potential data risk mitigation steps. 

What you’ll bring to the team 

• University/Post Graduate (Master’s) Degree;

• 3+ years’ experience in data management risk roles, ideally within CDO, CISO or 2LoD departments;

• Knowledge of data management frameworks, methods, and data protection;

• Affinity with data management technologies, platforms, and tools;

• Basic understanding of relevant regulations (e.g. BCBS239, GDPR).

If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on our website (make sure to scroll until you reach the Data Protection section/Candidates tab).