Cyber Governance & Compliance Senior Strategist

At ING Hubs Spain we are looking for a Cyber Governance & Compliance Senior Strategist

Your role and work environment:

At ING Hubs Spain, we are building a newCyber Governance and Compliancefrom the ground up.

This is a unique opportunity to join a recently established and fast-growing international Hub, where you will not only contribute to Cybersecurity Governance and Compliance activities but also help shape the future operating model, capabilities, processes, and culture of the team.

Unlike traditional governance roles, this position offers the opportunity to actively participate in the creation and scaling of a Cybersecurity Governance capability, working closely with senior stakeholders across ING while helping define how Cybersecurity Governance, AI Governance, Regulatory Compliance, Operational Resilience, and Cyber Risk Management evolve within the organization.

If you are motivated by building, influencing, and creating lasting impact, this role offers a unique opportunity to be part of something from the beginning and help shape its future direction.

As part of a growing international team, you will collaborate with experts across Global CISO, Risk, Compliance, Architecture, Technology, and Business functions while contributing to some of the most relevant cybersecurity challenges in the financial industry.

Why is this role exciting?

In this role, you will:

Help build and shape a Cybersecurity Governance and Compliance organization from scratch

Influence Cybersecurity Governance at a global scale

Work on key regulatory and strategic topics such as:

• AI Security Governance
• DORA
• Cyber Resilience Act (CRA)
• NIS2
• Operational Resilience
• Cyber Risk Management
• ECB inspections and regulatory programs

Collaborate with senior stakeholders across ING

Contribute to cybersecurity transformation initiatives impacting the entire organization

Gain significant international exposure and growth opportunities

Be part of a highly skilled and fast-growing Cybersecurity Hub

Your key responsibilities:

As a Cyber Governance & Compliance Senior Strategist, you will:

• Drive cybersecurity governance initiatives across ING and support the Global CISO organization.
• Support the design, implementation, and continuous improvement of cybersecurity governance frameworks, standards, policies, and control objectives.
• Monitor and assess compliance with regulatory requirements, internal policies, and security standards.
• Support strategic regulatory initiatives including DORA, CRA, NIS2, AI Security Governance, and Operational Resilience programs.
• Perform horizon scanning activities to assess the impact of emerging regulatory and cybersecurity developments.
• Translate regulatory requirements into practical cybersecurity controls and governance practices.
• Execute cybersecurity and technology risk assessments to support risk-based decision-making.
• Support ECB inspections, regulatory assessments, internal audits, and external reviews.
• Produce governance and regulatory reporting for management and senior stakeholders.
• Collaborate with global teams to improve cybersecurity maturity and governance practices.
• Contribute to the evolution of AI Governance and emerging technology risk management.
• Act as a trusted advisor on cybersecurity governance, regulatory compliance, and risk management topics.

What are we looking for?

We are looking for professionals who combine cybersecurity knowledge, strategic thinking, and strong stakeholder management capabilities.

Required qualifications

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Security, Risk Management, or equivalent experience.
• 6-10 years of experience in Cybersecurity, Governance, Risk Management, Compliance, Technology Risk, or related disciplines.
• Solid understanding of cybersecurity principles and technology environments.
• Strong understanding of governance, risk management, and control frameworks.
• Experience with cybersecurity and regulatory frameworks such as:
• ISO 27001
• NIST CSF
• NIS2
• DORA
• Cyber Resilience Act (CRA)
• SOC 1 / SOC 2
• Experience conducting risk assessments and supporting governance or compliance activities.
• Experience working with policies, control frameworks, KRIs, KPIs, and risk reporting.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Strong stakeholder management and influencing capabilities.
• Ability to operate in a complex international environment.
• Curiosity, growth mindset, and willingness to challenge the status quo.
• Fluent English.

You'll get extra points for

• Experience within banking, financial services, or regulated industries.
• Experience supporting ECB inspections or regulatory assessments.
• Knowledge of AI Governance, AI Risk Management, or emerging technology governance.
• Previous experience in consulting, Big Four firms, or large international organizations.
• Certifications such as:
• CISSP
• CISM
• CRISC
• CISA
• ISO 27001 Lead Auditor
• ISO 27001 Lead Implementer