Business Information Security Officer (BISO)
HBP (Amsterdam - Haarlerbergpark), Netherlands
ING is a bank that is known for its IT innovations and has a primarily focus on Risk & Security.
ING CISO Domestic Bank NL is looking for a passionate and inspiring Non-Financial Risk Specialist, who will support the CISO department and the IT organization in the role of Business Information Security Officer (hereafter: BISO).
As a BISO you enable IT senior management to work on IT Risk & Security activities ensuring the ING Market Leader applications and processes for NL are and remain safe and compliant.
The team
The IT & Cyber Risk Management team within CISO NL is responsible for identifying, assessing and mitigating IT & Security risks by supporting the CISO NL department to perform the role of risk oversight, independent monitoring and reporting of key IT & Cyber risks. In its supporting role, CISO NL is also responsible for advising on and facilitating risk awareness programs to strengthen the risk culture of the organization, as well as for monitoring Key Risk Indicators, reporting anomalies, escalating risk issues and recommending corrective actions. The CISO Leadership Team discusses security and IT-risk operational/tactical risks and issues related to performance, teaming, NL risk posture, global services, etc. and the BISO acts as the account manager for IT Leads and IT Area Leads on security and IT Risk activities. Issues, actions, and progress are discussed during weekly catch-up meetings between BISOs and ITALs and bi-weekly between BISOs, ITALs and the IT Leads.
Roles and responsibilities
To act as a customer success manager for NL IT leadership to ensure a secure & compliant practice across the IT domain(s) within scope of your responsibility.
You will fulfil this goal by:
acting as an IT-risk and security representative for NL IT domains.
developing and overseeing the implementation of IT-risk and security policies, procedures and controls within NL IT domains.
working with NL IT Leads and IT Area Leads to establish and maintain a structured IT-risk and compliance management program to maintain the risk appetite on the target levels and, where possible, reduce and/or mitigate the various risks.
providing guidance and support to NL IT domains on IT-risk and security best practices.
assisting and advising NL IT domains on IT-risk and security compliance (ITRMP controls, CAS findings, MIA’s, vulnerabilities, and other issues).
initiating improvements for the various risk areas, audits and policies.
monitoring and reporting on status and progress of IT-risk and security compliance state, issue mitigations, audit findings and other relevant KRI’s/KPI’s.
How to succeed
We hire smart people like you for your potential. Our biggest expectation is that you’ll stay curious. Keep learning. Take on responsibility. In return, we’ll back you to develop into an even more awesome version of yourself.
Inspiring, full of energy, proactive and good at presenting
Focused on working together, facilitating others within CISO and its stakeholders to be successful
You have experience and knowledge of IT Risk & Security and its related processes
You are strong at stakeholder management and project management
You drive for results and you think in possibilities
You are constantly looking for improvements and you have strong analytical skills
You are a self-starter and eager to learn and continuous develop yourself in the various Risk areas
Speaking and writing in English language is a must have
Rewards and benefits
We want to make sure that it’s possible for you to strike the right balance between your career and your private life. Find out more about our employment conditions.
The benefits of working with us at ING include:
● 24-27 vacation days depending on contract
● Pension scheme
● 13th month salary
● 8% Holiday payment
● Hybrid working
● Personal growth and challenging work with endless possibilities
● An informal working environment with innovative colleagues
About us
Curious about how ING empowers people and businesses to move forward? Discover what we do and what we can offer you.
Questions?
Contact the recruiter attached to the advertisement. Want to apply directly? Please upload your CV and motivation letter by clicking the ‘Apply’ button.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Audits BISO Business Intelligence CISO Compliance KPIs Monitoring Risk management Vulnerabilities
Perks/benefits: Career development
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.