Ops Risk Engineer

• REQ
• 07/11/2025
• Business Control
• Makati City, Filipijnen
• ING Hubs

Background on what ING is about (Generic ING background):

ING Hubs Philippines (ING Hubs PH) is an international part of the ING organization delivering services to many Business Units across the world for both Wholesale Banking and Retail Banking activities. Working for ING Hubs PH means working with the most diverse workforce and where no challenge is the same.

At ING our purpose is to empower people to stay a step ahead in life and business. We believe that sustainable progress is driven by people with the imagination and determination to make a better future for themselves and those around them.

ING is changing what banking is. For you, that means plenty of opportunities for personal growth in a continuously evolving environment. If this is the environment you thrive in, then apply and join us in changing the future of banking

Job Overview

As an OpsRisk Engineer, you will be part of the Financial Markets domain.

You will help on risk subjects like:

• Act as a central SPOC for all incoming IT risk assessments and control evidencing requirements adhering to the established control framework, SO requirements and industry best practices.
• Monitoring, tracking and managing deviations to established IT Risk controls.
• Mediating between 1st LOD/2nd LOD and DevOps teams.
• Conducting walkthroughs with auditors to review and validate IT Risk control processes.
• Lead technical due diligence sessions with third party vendors.

You will work in an AGILE environment, following SCRUM methodology together with DevOps squads, helping to maintain a safe and secure application.

Key Responsibilities

Your primary mission is to help the squads to implement IT Controls and to prove the controls are implemented effectively:

• ensure we are in control of our risk appetite
• define and document adequate risk processes and collect the evidence. Ensure that the different risk parties agree with the evidence
• responsible for creating documents and project management requirements or specifications
• provide documentation support to the technical team, interface with developers and operation engineers to define the specifications
• liaison between the team and other IT Risk professionals
• understand the need for security and apply it using the eisting framework and constant communication about changes
• participate in automation program for process and evidence for IT risk
• show proactivity and fleibility, come up with plans of action and adopt approaches if necessary
• understand the corporate climate and culture and act as an ambassador supporting the IT custodians and Asset owners

Key Capabilities/Eperience

Degree and/or eperience in IT risk management, cybersecurity, or related field.

Understanding of fundamental IT risk and security concepts and ability to think critically across technical control domains.

Knowledge of IT control frameworks (eg. SO, GDPR, CSA CCM) and industry standards (eg. ISO2700, NIST).

Proven track record of conducting IT control evidencing, qualitative risk assessments and developing mitigation strategies.

Risk reporting and communication:

• ability to communicate risk-related concepts to technical stakeholders.
• eperience in liaising with second line risk functions.
• strong written and verbal communications skills in English.

Certifications such as CISSP, CISM, CRISC or equivalent are a plus.

Knowledge

Mandatory:

1. Ability to understand the risk processes in an IT environment

2. Eperience with IT risk standards

3. Ability to make clear and convincing statements related to risk procedures

4. Proven planning and organizing eperience

Nice to have:

1. Project management eperience. Ability to track, plan and coordinate projects related to third party risk management, technical compliance, and/or IT risk automation.

2. Eperience in working with Dev(Sec)Ops teams across vulnerability management, threat hunting, security detection and response and developing, or contributing to information security policies and procedures.

3. Knowledge of Agile methodology

Your place of work

Eplore the area

Questions? Just ask

ING Recruitment team

Bij ING willen we het beste uit mensen halen. Daarom hebben we een inclusieve cultuur waarin iedereen de kans krijgt om te groeien en een verschil te maken voor onze klanten en de samenleving. Diversiteit, gelijkheid en inclusie staan bij ons altijd voorop. We behan iedereen eerlijk, ongeacht leeftijd, geslacht, genderidentiteit, culturele achtergrond, ervaring, geloof, ras, etniciteit, beperking, gezinssituatie, seksuele geaardheid, sociale afkomst of wat dan ook. Heb je hulp nodig of kunnen we iets voor je doen tijdens je sollicitatie of gesprek? Neem dan contact op met de recruiter die bij de vacature vermeld staat. We werken graag samen met jou om het proces eerlijk en toegankelijk te maken. Lees hier meer over hoe wij staan voor diversiteit, inclusie en erbij horen.