Third Party Operational Risk Specialist @ING Hubs Romania

We started out in 2015 as ING’s software development hub – a distinct entity from ING Bank Romania – then steadily expanded our range to include more services and competencies.

Formerly known as ING Tech, as of 2022 we provide borderless services with bank-wide capabilities under the name of ING Hubs Romania and operate from two locations: Bucharest and Cluj-Napoca.

With the help of over 1600 engineers, risk, and operations professionals, we offer 130 services in tech, non-financial risk & compliance, audit and retail operations to 24 ING units worldwide.

Our tech capabilities remain the core of our business, with more than 1300 colleagues active in Data Management, TouchPoint Channels & Integration, Core Banking, and Global Products.

We enjoy a flexible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged. Work ethics, honesty and knowledge sharing are key to our teams and we’re always looking for like-minded people 

Here’s a sneak peak of what our colleagues say about working within ING Hubs Romania:

• At ING, software and soft skills are equally important | 78% of our IT colleagues agree

The mission

ING Global ORM Center (IGOC) mission is to provide:

• professional support to Corporate Non-Financial Risk (NFR) Management in managing and conducting the operational risk management function (ORM) within ING Bank as defined and described in the ING Global NFR Management Charter
• control-oriented qualitative activities (Second Line Monitoring) towards ING entities globally.

The team of Operational Risk professionals is working with a variety of internal stakeholders, in a multi-cultural environment, that provides the opportunity of gaining oversight on the non-financial risk practice, as well as the opportunity to further support the enhancement of the global control framework.

Role and working environment

As NFR specialist on Third Party Risk Management (TPRM), you will be part not only of IGOC but also part of the Execution, Delivery and Process Management (ED&PM) team within the global Non-Financial Risk function of ING. The ED&PM team is globally responsible for risk management in the areas of amongst others Outsourcing/ Third Party Risk Management.

You will support the TPRM Policy Owner to ensure that it is in line with the applicable laws and regulations and will monitor the implementation of such requirement. Using the non-financial risk management tools that are being implemented bank wide/ in all locations (e.g. Key Control Testing activities/ Issue management/ Event management/ Risk Reporting etc), you will be able monitor the implementation and flag any deficiencies. You report hierarchically to the Lead NFR.

What makes your role interesting and challenging, is the diversity of the non-financial risk domains that you can cover; you have the opportunity to build up these activities in the best way it suits us as a team and as an organization. Even though the tools we use are the same, the Third Party Risk Management Policy has its own specificities and different stakeholders that requires a tailored approach. 

Your day to day

• On behalf of the TPRM Policy Owner, keep the TPRM Policy document up to date, in line with the internal and external regulations (e.g. European Banking Association Guidelines (EBA);
• Support the implementation of the TPRM Policy, by providing the tools & guidelines towards 2nd LoD NFR functions within the locations;
• Challenge and review the 1LoD owned TPRM Control Standard, procedures, and tools;
• Challenge and advise the 1st LoD risk management practices for the respective non-financial risks;
• Provide advice, guidance and support regarding remediation actions for identified risks;
• Monitor and oversight:
  • Monitor and report on the implementation of the TPRM Policy and Control Standard on behalf of the Policy Owner and towards relevant non-financial risk committees;
  • Risk based monitoring of the associated risks, as well as consistent insight into the key risks (internal & external) for the topics assigned;
• Communication & Training: build relevant content within the NFR community and engage the TPRM community through Global calls and virtual teams;
• Work efficiently together with the local team as well as the virtual team; in and outside NFR, including 1LoD representatives (global teams as well as locations).

What you’ll bring to the team

• You are an experienced risk specialist with > 7 years of relevant experience;
• You have expert knowledge of Non-Financial Risk and regulatory requirements like EBA Guideline on Outsourcing Arrangements, European Guideline related to product oversight and governance requirements, Operational Resilience etc.;
• You express yourself clearly and effectively, both in writing and verbally. You are able to effectively challenge colleagues in first and second line of defence;
• A team player with strong interpersonal skills who can operate in a diversified and multicultural work environment;
• Excellent analytical skills as well as a keen eye for detail;
• You are fluent in English;
• You have a university degree or equivalent.