IT Risk & Control Analyst

IT Risk & Control Analyst

Background on what ING is about (Generic ING background):

ING Hubs Philippines (ING Hubs PH) is an international part of the ING organization delivering services to many Business Units across the world for both Wholesale Banking and Retail Banking activities. Working for ING Hubs PH means working with the most diverse workforce and where no challenge is the same.

At ING our purpose is to empower people to stay a step ahead in life and business. We believe that sustainable progress is driven by people with the imagination and determination to make a better future for themselves and those around them.

ING is changing what banking is. For you, that means plenty of opportunities for personal growth in a continuously evolving environment. If this is the environment you thrive in, then apply and join us in changing the future of banking!

Job Overview

The IT Risk & Control Analyst (Analyst level) plays a pivotal role in the review and assessment of various IT minimum standards used to control the risk level of IT within the bank. The candidate will perform gap analysis between minimum standards and the actual state of the IT environment and suggest actions for remediation. The candidate will also advise and support the IT custodians of business application in the remediation process and ensure that the end state complies with the IT risk and control minimum standards.

Key Responsibilities

To deliver, maintain and keep IT Risk in control on the IT-applications and services in order to realize the ING strategy in the field of information technology.

• Review IT minimum standards and control objectives for IT minimum standards in the areas of Foundation Control, Identity and Access Management, Platform Security, Operational Resiliency, Change Management, Security Monitoring and Cyber Security
• Gather evidence for compliance of the IT Minimum standards at IT Assets Level and at Entity Level
• Perform gap analysis and document proposals for remediation. Initiate and ensure remediation by IT custodians. Support and advise IT custodians in the remediation process.
• Update various IT process and procedures to ensure compliance to IT minimum standards in mentioned areas
• Oversee and report on progress of the review, gap analysis and remediation of IT controls to management

Key Capabilities/Experience

• At least 3 years in IT area (financial sector is a plus), IT security experience is a plus
• High technical education or an equivalent combination of education and experience
• Comprehensive knowledge and experience in managing and supporting IT systems
• Experience with enterprise-level IT processes and controls
• Knowledge of security frameworks like ISO/BS and COBIT is a plus
• Middle level experience in Excel (pivot tables, reports, basic macro skills)
• Knowledge of ITIL is a plus
• Good communication skills and good writing skills
• Self-directed and motivated
• Integrity, highly analytical mind and multi-tasking skills, with good follow-through
• Delivery oriented - used to meeting strict deadlines, while producing quality work