Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Associate, Information Security Engineer role.

Rezi rewrites your resume against ING's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Associate, Information Security Engineer posting at ING — free, in seconds.

About the Role

The Information Security Governance Expert oversees Identity Access Management, Cyber risk management, IT Controls compliance, and control effectiveness. This role ensures information security risks are identified, assessed, monitored, and reported, supporting adherence to ING policies, regulatory requirements, and industry standards.

Responsibilities

Drive implementation and continuous improvement of information security governance frameworks following ING Risk Management practices.
Perform cybersecurity Identity and access management risk assessments on High Privilege Access and control reviews across business and technology assets.
Act as a team member supporting change management business as usual and automation initiatives by providing analysis or monitoring progress with guidance from WB CISO.
Act as process group owner to conduct research on controls and processes to enable analysis of key themes and trends using primary data sources for quarterly risk opinion.
Assist in assessing compliance with information security policies, regulatory requirements, and control standards.
Track and report security findings, issues, exceptions, and remediation progress.
Develop management reporting, dashboards, risk metrics, and governance updates.
Collaborate with Technology, Risk, Compliance, Audit, Legal, and Business stakeholders to drive security outcomes.
Implement required cyber security measures, such as IAM, CHM, 3rd party assessments and provide input on their design, monitoring performance to notify engineers experts of any problems.
Support enterprise security initiatives, regulatory remediation programs, and strategic cybersecurity projects.
Provide governance guidance for technology transformations, third-party engagements, and new business initiatives.
Promote a strong security and risk management culture across the organization.
Act as IT Security team SME to align activities with 2nd line of defence and share content knowledge and provide pragmatic solutions for DevOps teams.
Develop and mature the ING information security program, ensuring compliance with relevant regulations and standard methodologies and provide SME support Identity and access management.
Liaise with the technical teams to ensure alignment between the security and business, thus coordinating the strategic/ tactical planning.
Contribute as SME in the development, implementation, and maintenance of a strong information privacy and security program to meet ING risk appetite on quarterly basis.
Manage IT security standards and procedures to ensure they are developed/updated/reviewed.
Develop, implement, and maintain information security monitoring roadmap to align with firm KPI/KRI’s.

Requirements

3+ years’ experience in Information Security, Risk Management, Identity and Access Management, Cyber compliance, IT Audit, Dev Sec Ops, Frontier AI.
Familiar with non-financial risk models and threat assessments.
Proven analytical ability to solve complex business and technical problems.
Critical thinker able to level, communicate and educate on both Senior Management and other SMEs in information technology teams.
Poise and the ability to act calmly and competently in high-pressure, high-stress situations.
Abreast on new tools and technologies related to information security.
Demonstrated experience with various information security controls, including integration with secure IAM tooling’s, systems security, encryption systems, and application security.
Like to continuously develop your (technical) expertise and knowledge.
Like to work as an independent professional, i.e., be pro-active, have high-quality standards and work according to the planning.
Like to interact with Information Security Specialists and Senior Management to build strong relationships.
A critical, though positive constructive mind set, accurate and thorough., connect self-reflection and action.
Deep knowledge and experience with security and regulatory compliance as well as external audits.
Prepared to challenge the program and Information security 2nd line of defence and have the "difficult conversations” where needed in the interests of ING policies & standards.
Experience with enterprise AI tools and governance.

Skills

Identity Access Management
Cyber risk management
IT Controls compliance
Information security governance
Cybersecurity
Dev Sec Ops
Frontier AI
Information privacy

Location

New York

Work Type

Hybrid

Experience Level

Associate

Education Level

Bachelor’s or master’s degree in computer science or a related field
CISM certification
Certified in Cyber Security (CC by ISC2)

Salary/Compensations

$85,000-110,000

Benefits

Discretionary bonus program
Comprehensive health benefits (including a $0 premium medical plan with HSA)
Generous 401k savings plan
Competitive PTO
Adoption, surrogacy, and fertility services
Student debt assistance
Subsidies for expenses associated with commuting and fitness

About the Company

In the Americas, ING’s Wholesale Banking division offers a broad range of innovative financial products and services to domestic and international corporate and institutional clients.
ING Americas follows a hybrid work model, allowing for in-office / work from home flexibility.
ING Bank does not have a commercial banking license in the U.S. and therefore not permitted to conduct a commercial banking business in the U.S. Through its wholly owned subsidiary ING Financial Services LLC, and its affiliates, it offers a full array of wholesale products such as commercial lending and a full range of FM products and services.

Equal Opportunity

ING is a committed equal opportunity employer. We welcome applicants of diverse backgrounds and hire without regard to race, gender, religion, national origin, citizenship, disability, age, sexual orientation, or any other characteristic protected by law. We celebrate these differences and rely upon your unique perspective to innovate and seize new opportunities. Come as you are.