Cyber Risk / AI Risk Expert

About the role

ING Hubs Spain is looking for a Cyber Risk / AI Risk Senior Expert, a senior risk professional who strengthens the bank's cyber, technology and AI risk management. The role advises and oversees key risk decisions so that risks are identified, assessed, managed and reported in line with the bank's risk appetite and regulatory expectations. It works across Business, Technology, Security, Risk and Compliance functions and acts as a trusted advisor to senior stakeholders.

Key responsibilities

• Conduct cyber, technology, AI and third-party risk assessments
• Manage and maintain the cyber risk register, including risk treatment, tracking and reporting
• Evaluate security policy exceptions and risk acceptance requests
• Assess AI solutions, use cases and third-party providers from a risk and control perspective
• Support third-party risk management and vendor security due diligence
• Produce risk metrics, KRIs, dashboards and executive-level reporting
• Advise stakeholders on risk mitigation strategies and control effectiveness
• Support regulatory, audit, compliance and supervisory engagements
• Contribute to improving cyber risk management and AI governance frameworks

Required profile

• Minimum 8 years of experience in cybersecurity, cyber risk, information security, technology risk, GRC or enterprise risk management; 10+ years preferred in large regulated organisations
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management or equivalent
• Experience with cyber risk assessments, risk registers, control frameworks and risk reporting
• Experience managing third-party and technology risks, including cloud and AI-related risks
• Strong stakeholder management, communication and influencing skills

Required skills

• Knowledge of frameworks such as NIST, ISO 27001, COBIT, DORA, GDPR and financial sector security requirements
• Experience with GRC platforms such as OneTrust, ServiceNow IRM or Archer
• Certifications such as CISSP, CISM, CRISC, CISA or CGRC preferred

What we offer

• Flexible working: choose which days you work from home and which you come to the office in Madrid
• Restaurant card, transport allowance and pension plan after 1 month
• Health and life insurance for you and your family
• Office facilities including electric mobility solutions, doctor, hairdresser, gym and errand help
• Flexible remuneration model with additional services such as nursery, transport card and training aids