IT Risk & Control Analyst

Job Overview

The IT Risk & Control Analyst (Analyst level) plays a pivotal role in the review and assessment of various IT minimum standards used to control the risk level of IT within the bank. The candidate will perform gap analysis between minimum standards and the actual state of the IT environment and suggest actions for remediation. The candidate will also advise and support the IT custodians of business application in the remediation process and ensure that the end state complies with the IT risk and control minimum standards.

Key Responsibilities

To deliver, maintain and keep IT Risk in control on the IT-applications and services in order to realize the ING strategy in the field of information technology.

• Review IT minimum standards and control objectives for IT minimum standards in the areas of Foundation Control, Identity and Access Management, Platform Security, Operational Resiliency, Change Management, Security Monitoring and Cyber Security.

• Gather evidence for compliance of the IT Minimum standards at IT Assets Level and at Entity Level.

• Perform gap analysis and document proposals for remediation. Initiate and ensure remediation by IT custodians. Support and advise IT custodians in the remediation process.

• Update various IT process and procedures to ensure compliance to IT minimum standards in mentioned areas.

• Oversee and report on progress of the review, gap analysis and remediation of IT controls to management.

Key Capabilities/Experience

• At least 3 years in IT area (financial sector is a plus), IT security experience is a plus

• High technical education or an equivalent combination of education and experience

• Comprehensive knowledge and experience in managing and supporting IT systems

• Experience with enterprise-level IT processes and controls

• Knowledge of security frameworks like ISO/BS and COBIT is a plus

• Middle level experience in Excel (pivot tables, reports, basic macro skills)

• Knowledge of ITIL is a plus

• Good communication skills and good writing skills

• Self-directed and motivated

• Integrity, highly analytical mind and multi-tasking skills, with good follow-through

• Delivery oriented - used to meeting strict deadlines, while producing quality work