> Markdown version of [/jobs/ext/3044346-it-risk-specialist](https://www.wearedevelopers.com/jobs/ext/3044346-it-risk-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Risk Specialist - **Company:** 's risk appetite. - **Location:** Madrid, Spain (Remote available) - **Contract:** Voluntary work - **Skills:** Agile Methodology, Cloud Computing, Cyber Security - **Published:** September 24, 2026 - **Apply:** https://www.adzuna.es/contact-us.html ## About the Role · Extensive experience in both IT Security and IT Risk · Track record of consulting/advising Certification in and / or proven skills in Security and Risk (CISSP and CISM or CGEIT/ CRISC certification is desired to have) ## Description We are looking for a talented and enthusiastic IT Risk Specialist to join our Tech Services Team as part of the IT Cloud and Tech Foundations Contribute to business risk and control functions to ensure that ING's activities are in line with regulatory requirements and run smoothly in such a way that it can be demonstrated to the regulators and the outside world. Contribute to the integrity of ING's products, services, employees and compliance with respect to the outside world. Your key responsibilities: As an IT Risk Specialist you will: - Advisory the business in the 1st and 2nd Line of Defence, embracing the agile way of working, to promote awareness of the concept of "Making a Safer Bank" so that, the business risks are understood and properly managed and mitigated. - Working with the Squads promoting awareness, advising and challenging on risks and steering them until the evidence of the mitigation are approved. - Performing key control testing to prove that control is within the standards of the Organization's risk appetite. - Follow up the Backlog's speed in Risk mitigation activities in order to prioritize actions to aim the Organization's Ambition. - Supporting Business Management (Risk owner) in controlling their IT Risk (issues and controls). - Reporting metrics of the Organization's assets to the local Center of Expertise (CoE). - Coordinate IT Risk activities among different squads and in collaboration with colleagues to ensure optimal performance and efficiency What are we looking for? Want to know if this job is made for you? These are some of the qualities that we value the most for this role. And if the shoe fits… don't hesitate to apply! Mandatory · Pro-actively advise your colleagues in the departments about IT Risk · Work with other departments to establish a powerful risk-aware culture · Develop IT-related risk policies, aiming for simple and strong guidance · Report on IT-risk themes for risk governing bodies, establishing an integrated risk view, · Drive IT Risk & Security Control Implementation · Experience coordinating tasks across different squads in collaboration with their Product Owners, taking into account priority and anticipation to minimize impact on their backlogs. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [ShapeShift: Reinventing Agile for a B2B SaaS Scale-Up](https://www.wearedevelopers.com/videos/1655-shapeshift-reinventing-agile-for-a-b2b-saas-scale-up) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)