IT Risk Management Team Lead

We are looking for you, if you:

• Have at least 5 years of experience in IT risk management or information security

• Hold a Bachelor’s degree in computer science, Information Technology, or a related field (Master's degree preferred)

• Understand IT General Controls (ITGC) and IT control frameworks such as COBIT/NIST/ISO 27001/SOX

• Have experience in leading project or operational teams

• Possess strong analytical skills and the ability to assess organizational impact

• Are knowledgeable about regulatory and legal requirements in IT

• Can collaborate effectively with stakeholders at various levels of the organization

• Are proficient in English (C1 level)

You'll get extra points for:

• Certifications such as CRISC, CISM, CISSP, ISO 27001 Lead Implementer / Lead Auditor

• Experience in the financial sector

• Knowledge of Polish language

Your responsibilities:

• Guide a team of over 10 experts responsible for identifying, assessing, and monitoring IT risks

• Develop and implement IT risk management policies and procedures

• Collaborate with IT, Information Security, Audit, and Compliance teams to mitigate risks

• Oversee the entire IT risk lifecycle: registration, analysis, action planning, escalation, and reporting

• Prepare reports for senior management and support strategic decision-making

• Ensure compliance with relevant frameworks and regulations (e.g., ISO 27001, NIS2, DORA, GDPR)

• Monitor technology risk trends and recommend preventive measures

Information about squad:

We are looking for an experienced IT Risk Management Team Lead to join our team and take ownership of developing and implementing our IT risk management strategy. You will lead an existing team of professionals and drive its further development, collaborate with key stakeholders, and ensure compliance with regulations and best practices in IT risk management.

The role naming convention in the global ING job architecture will be “Chapter Lead Engineer III”.