Identity and Access Management Expert

Are you passionate about strengthening information security through governance, risk management, and control? Within ING’s Global Identity & Access Management (gIAM) organization, we are looking for an Identity and Access Management Expert who will shape and safeguard how identity and access risks are managed across the bank. In this role, you will operate at the heart of IAM governance, defining standards, improving risk controls, and driving compliance across a global organization. You will not run operations, but instead influence, guide, and challenge them to ensure IAM is consistently “in control”.

The team

Identity & Access Management (IAM) is embedded in our day to day activities across the entire organization to ensure the right people can access the systems/tools required for their jobs with right authorizations. By designing, implementing, rolling out and maintaining standardized global IAM approach and solutions across ING, we ensure an effective and efficient IAM as part of the Global Chief Information Security Office (CISO).

You will join the IAM Expert Team within Global IAM (gIAM), part of the Global Chief Information Security Office (CISO). The team plays a central role in establishing IAM governance structure in ING together with policies and standards and coordinates and supports entities for the implementation.

Our team focuses on:

• Governance and continuous improvement of IAM frameworks and standards
• Monitoring IAM risk posture and control effectiveness
• Supporting entities in achieving compliance with global IAM requirements
• Driving knowledge sharing, training, and IAM awareness

Unlike operational IAM teams, we do not execute day-to-day access management activities. Instead, we act as a global steering and oversight function, ensuring IAM is effective, compliant, and aligned with ING’s risk strategy.

Roles and responsibilities

As an Identity and Access Management Expert in the IAM Expert Team, you will contribute to strengthening IAM governance and control across ING by:

• Defining and maintaining the Global IAM Framework (policies, standards, test plans, and process models)
• Analyzing IAM control deficiencies and supporting entities in remediation and continuous improvement
• Driving IAM risk management by monitoring risk posture, key control testing results, and audit findings
• Monitoring compliance with IAM standards and escalating risks or deviations to relevant stakeholders
• Providing expert guidance to relevant stakeholders on governance, risk, and control topics
• Supporting audits and regulatory requirements by ensuring proper evidence, documentation, and control design
• Contributing to IAM reporting and data-driven insights on risk, compliance, and control effectiveness
• Delivering training and awareness to strengthen IAM knowledge and adoption across the organization

How to succeed

We hire smart people like you for your potential. Our biggest expectation is that you’ll stay curious. Keep learning. Take on responsibility. In return, we’ll back you to develop into an even more awesome version of yourself.

You are an energetic and proactive IT Security professional with a affinity to IAM technologies and a positive mentality. Being a team player maintaining working relations comes naturally to you based on social skills rather than using hierarchical structures. You are always a step ahead of issues and your attitude is to support others, but within your area of responsibility. Being an ambassador for IT Security around a globe, ideally, for this role you have:

• Strong expertise in IAM governance, risk, and controls
• Understanding of IT risk frameworks, control design, and audit/compliance processes
• Ability to analyse complex control issues and translate them into improvements
• Skills to challenge stakeholders and drive risk-aware decision making
• Experience with IAM standards, frameworks, and regulatory expectations (e.g., control standards, SoD, least privilege)
• Ability to communicate clearly and influence across a global, matrix organization
• 5+ years of professional experience within ING and/or experience within other multi-national corporation, in the field of IT security, IT audit or IT Management.
• Related Information Security certifications, such as CISA, CISM, CRISC, CISSP.

We want to make sure that it’s possible for you to strike the right balance between your career and your private life. Find out more about our employment conditions.

The benefits of working with us at ING include:

• 25-28 vacation days depending on contract
• Pension scheme
• 13th month salary
• 8% Holiday payment
• Hybrid working
• Personal growth and challenging work with endless possibilities
• An informal working environment with innovative colleagues

Curious about how ING empowers people and businesses to move forward?