> Markdown version of [/jobs/ext/4490646-it-risk-management-expert](https://www.wearedevelopers.com/jobs/ext/4490646-it-risk-management-expert). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Risk Management Expert - **Company:** ING Bank N.V. - **Location:** Madrid, Spain (Remote available) - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cloud Computing Security, Identity and Access Management, IT Management, Power BI, Microsoft Power Automate, Cybercrime, Data Analytics - **Published:** November 2, 2026 - **Apply:** https://www.adzuna.es/details/5948865398 ## About the Role · You have strong experience in Information & Technology Risk Management, with a solid understanding of IT governance, IT processes, technology infrastructure, cloud, data, third-party risk, and IT resilience. · You understand cyber security risk, including cyber threats and vulnerabilities, identity and access management, security by design, cloud security, change and incident management. · You are experienced in risk identification and assessment, risk prioritisation, control assessment, risk monitoring and reporting, and the application of risk frameworks, policies and standards. · You understand the role of an independent second line risk function and are comfortable providing constructive challenge while building trusted relationships with risk, business and technology stakeholders. · You can operate effectively across local and global environments, combining hands-on support to countries with a broader functional oversight perspective. · You have strong data analytics skills and can turn complex risk data into meaningful insights, trends and management information. Experience with Power BI is highly valued. · You see technology as an enabler for better risk management. Experience with Power Automate or similar workflow automation tools is highly valued. · You can translate complex technology and cyber topics into clear business impact and actionable risk insights for senior stakeholders. · You combine critical thinking and professional scepticism with a creative, curious, and improvement-oriented mindset. You proactively develop ideas and propose practical improvements rather than waiting for solutions or instructions. · You have a forward-looking perspective and an interest in emerging technologies and changing regulatory expectations. Experience with Artificial Intelligence (AI), AI risk management or the risk implications of AI-enabled technologies is considered an advantage. · You enjoy working in an international environment, collaborating across functions, countries and seniority levels, and sharing knowledge with others. ## Description We are looking for a talented and enthusiastic IT Risk (IRM) Expert - NFR Specialist to join our Information & Technology Risk Management Team in ING Hubs Spain. This is a unique opportunity to combine country-level IT Risk expertise with Global Information & Technology Risk Management responsibilities, giving you exposure to a wide variety of technology risk challenges, international stakeholders and strategic topics across ING. This combination makes the role different: you will work across both local and global perspectives, turning technology developments, risk data and emerging threats into insights that strengthen risk management and support better decision-making. Your key responsibilities: As an IRM expert you will: · Be a trusted IT Risk advisor to IT and business management in the countries supported and to other Non-Financial Risk specialists, bringing an independent second line perspective and constructive challenge; · Define and deliver strategic and ad-hoc risk analyses and management reports, translating complex risk information and data into clear insights and business impact; · Contribute to the functional oversight of the IRM community through quality assurance reviews and other steering activities; · Participate in, constructively challenge and periodically report on the risks of key strategic IT programmes, projects and technology developments; · Propose optimizations and improvements, share knowledge and help strengthen Information & Technology Risk capabilities across the NFR community; · Support the IRM and NFR Management with research, fact finding, evidence collection, analysis, reporting and providing insights; · Contribute to the development and maintenance of the IT Risk framework, policies, minimum standards, procedures, methods and techniques; · Identify emerging internal and external developments, technology trends and threats, and proactively translate them into relevant insights, priorities and improvement proposals; · Contribute to assessing the impact of legal and regulatory developments, supervisory expectations and reports, and support the coordination and monitoring of related actions. · Use data analytics and visualisation to identify trends and patterns, generate actionable risk insights and strengthen management information and decision-making, including through tools such as Power BI and Power Automate; · Proactively identify and develop opportunities to improve IRM processes, reporting and ways of working, using automation and emerging technologies where these can add value.