> Markdown version of [/jobs/ext/1968002-grc-expert](https://www.wearedevelopers.com/jobs/ext/1968002-grc-expert). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Grc Expert - **Company:** Ing - **Location:** Santiago de Compostela, Spain (Remote available) - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Technology, Data Analytics - **Published:** August 7, 2026 - **Apply:** https://www.buscojobs.com.es/grc-expert-en-santiago-de-compostela-ID-365163457 ## About the Role We are looking for a talented and enthusiastic GRC Expert to join our team at ING Hubs Spain., A M.Sc degree in computer science, information security, risk management or equivalent. Work experience between 6 and 10 years of experience in information security, risk management in a larger institution. A solid understanding of cybersecurity and IT. Solid understanding of risk management within (financial) institutions. Knowledge of GRC frameworks and compliance standards (ISO/IEC *****, NIST CSF, CIS, NIS2, SOC 1/2). Affinity with experience in managing policies, KRIs, and risk reporting at the executive level. Understanding of data analytics. Good communication skills, verbal and on paper. English is the global professional language in ING. An improvement and innovation mindset. Ability to work in a multi?cultural working environment. Good presentation skills. The skillset of a teamplayer. You'll get extra points for: Experience in a financial institution. Management experience. Certifications or passed exams (such as CISM, CRISC, CISA or equivalent). Proficiency in the Dutch language. ## Description At ING Hubs Spain we are looking for a GRC ExpertYour role and work environment:We are looking for a talented and enthusiastic GRC Expert to join our team at ING Hubs Spain.You will be part of a new team that is active in the fields of cybersecurity governance, regulatory compliance, horizon scanning and influencing new regulations. Furthermore, you will be performing risk analyses in support of governance and support operational resilience testing within ING. As the team will cover a broad set of activities and responsibilities, we are looking for flexible people with an IT and risk management basis that are eager to grow and learn. You will work together with a broad range of teams within the CISO and CTO functions within the bank.Your key responsibilities:Drive adequate governance of cybersecurity issues both for ING as Global CISO itself.Help oversee proper set?up and maintenance of ING's standards in the field of cybersecurity.Monitor and drive compliance of CISO to external regulatory standards and internal policies and standards.Monitor and influence cybersecurity regulations and drive implementation of regulatory cybersecurity programs.Track regulatory obligations producing regulatory reports.Support audits - e.g., ECB audits and questionnaires onsite inspections, internal and external maturity assessments.Help ensure adherence to ECB guidelines (e.g. DORA RTS, CRA).Map controls to regulatory expectations.Execute risk analyses on cybersecurity to support governance and compliance on cyber risk.What are we looking for?Want to know if this job is made for you? These are some of the qualities that we value the most for this role. And if the shoe fits... don't hesitate to apply!A M.Sc degree in computer science, information security, risk management or equivalent.Work experience between 6 and 10 years of experience in information security, risk management in a larger institution.A solid understanding of cybersecurity and IT.Solid understanding of risk management within (financial) institutions.Knowledge of GRC frameworks and compliance standards (ISO/IEC *****, NIST CSF, CIS, NIS2, SOC 1/2).Affinity with experience in managing policies, KRIs, and risk reporting at the executive level.Understanding of data analytics.Good communication skills, verbal and on paper. English is the global professional language in ING.An improvement and innovation mindset.Ability to work in a multi?cultural working environment.Good presentation skills.The skillset of a teamplayer.You'll get extra points for:Experience in a financial institution.Management experience.Certifications or passed exams (such as CISM, CRISC, CISA or equivalent).Proficiency in the Dutch language.What do we offer?Be flexible my friend.Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.Restaurant card.So that thinking about what to have for lunch doesn't take up your time or your cravings.Our house will be your home.In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!Health insurance.For you and all your family (spouse/partner and children).Life insurance.We help you protect what matters most to you.Flexible remuneration.In addition, you will enjoy our flexible remuneration model, through a more tax?advantaged way, you will be able to access other services such as nursery, transport card, training aids...Transport allowance.It doesn't matter where you live, we'll help you get to the office.Pension plan.You can benefit from our pension plan after 1 month with us!#J-*****-Ljbffr ## Related Videos - [Unleashing the power of AI to prevent financial crime](https://www.wearedevelopers.com/videos/1088-unleashing-the-power-of-ai-to-prevent-financial-crime) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [The Future of Recruiting: Innovations and Challenges in the European IT Sector](https://www.wearedevelopers.com/videos/1056-the-future-of-recruiting-innovations-and-challenges-in-the-european-it-sector) - [It's not easy being green](https://www.wearedevelopers.com/videos/558-it-s-not-easy-being-green) ## Related Articles - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam) - [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)