Head of IT Risk Management

The role creation is subject to the Works Council positive advice and implementation of the new structure resulted as a consequence of Risk RfA on 1 April 2026

Global Head of Information Technology Risk Management

Head of NFR III (JG 23)

The Global Head of Information Technology Risk Management leads a global team dedicated to technology risk. Responsibilities include setting risk frameworks, performing oversight, supporting deep-dives and reviews, and challenging the first line of defense on risk metrics and thresholds. The role demands a strategic mindset, strong stakeholder management, and the ability to influence across the organization and with external regulators. Success in this role means driving continuous improvement in risk management and supporting ING's resilience to future and emerging risks.

The Team

The Information Technology Risk Management (ITRM) team is part of the Non-Financial Risk (NFR) domain within ING. This specialized team focuses on identifying, managing, measuring, and mitigating technology-related risks across the organization, contributing to the bank's resilience and risk-aware culture.

The ITRM team develops and maintains frameworks, policies, and procedures for technology risk, supports other NFR teams, and oversees risk identification and mitigation. The team's work is critical to ING's broader goals of operational resilience and compliance, serving all business lines globally. The role requires strong leadership to drive risk management initiatives and ensure effective oversight of technology risks, including foundational tech, data, cyber, and emerging technologies (AI, Blockchain, Quantum Computing).

The Global Head of Information and Technology Risk Management reports hierarchically to the Global Head of Non-Financial Risk located in Amsterdam.

Roles and responsibilities

• Leading the development and maintenance of IT risk-related frameworks, policies, procedures, and templates.

• Representing NFR in governance forums and senior stakeholder discussions (e.g., Bank NFRC, TIPM Committee, OpRes Steerco).

• Overseeing identification, registration, and reporting of all material operational risks.

• Supporting thematic deep-dives and reviews, and contributing to comprehensive risk assessments.

• Identifying and assessing emerging risks, recommending mitigating actions, and enhancing controls.

• Supporting policy implementation and embeddedness across local entities.

• Challenging 1LoD on risk metrics, thresholds, and limits.

• Engaging with internal stakeholders (Group CTO, CRO, country CIOs, MT NFR) and external regulators (ECB, DNB, ORX).

How to succeed

We hire smart people like you for your potential. Our biggest expectation is that you'll stay curious. Keep learning. Take on responsibility. In return, we'll back you to develop into an even more awesome version of yourself.

We are looking for the following knowledge and experience:

• Master's degree in Computer Science, Mathematics, Engineering, or equivalent.

• Minimum 10 years' senior leadership experience in Tech functions and ideally IT Risk Management.

• Deep understanding of technology across all layers (data centers, infrastructure, cloud, platforms, business applications).

• Solid grasp of tech-related risks, non-financial risk management, and relevant regulations (e.g., DORA, EBA, MARisk).

• Experience in large-scale transformations and managing cross-country teams.

• Strong analytical, problem-solving, communication, and stakeholder management skills.

• Strategic thinking, ability to lead through change and ambiguity, and sound judgment.

Required Soft Skills

• Change leadership and adaptability: Demonstrates the ability to lead through change and uncertainty, quickly adjusting to shifts in the external risk environment—whether driven by regulatory developments, societal trends, or emerging risk types. Able to guide teams through transformation and maintain focus in a continuously evolving landscape.

• Risk-based decision-making and focus: Applies a risk-based mindset to prioritize what truly matters, makes courageous decisions in complex situations, and maintains focus on areas with the greatest impact for the organization.

• Hands-on approach: Willingness to actively engage in operational details and lead by example, ensuring practical solutions are implemented effectively.

• Positive mindset and can-do mentality: Demonstrates optimism and resilience, inspiring the team to overcome challenges and pursue continuous improvement.

• Cooperative yet able to be strict: Balances collaboration with the ability to enforce standards and make tough decisions when necessary.

• Consistency: Maintains a reliable and steady approach in decision-making, communication, and execution of responsibilities.

• Strong collaboration skills: Excels at building relationships across teams, departments, and geographies to achieve shared goals.

• Constructive influence: Encourages open dialogue, provides clear direction, and fosters a culture of accountability and trust.

About us

Curious about how ING empowers people and businesses to move forward?

Discover what we do and what we can offer you.

Questions?

Contact the Carolien Koster (HRBP). Want to apply directly? Please upload your CV and motivation letter by clicking the 'Apply' button.

Please note, multiple interview steps involving various business stakeholders will be part of the selection process.

An Enhanced Reliability Screening and positive clearance is required for appointment to this sensitive position.