IT Security Engineer

Job Specification

Department Overview:
The purpose of IT Security is ensuring ING will be amongst the safest banks and will be seen as a leader in (IT) security. We assist Wholesale Banking (WB) including the Tech organization globally in being successful in IT Risk and IT Security. Overall, we ensure that IT Security and IT Risk Management is part of our DNA.

The IT Security squad has a reporting line to UK CIO and is responsible for 1st Line of Defence Security & Risk Management activities of UK Region and management of Information Security & Risk associated with all technology assets used by ING UK (London) and our office in Dubai, as well as Security advisory in projects and Cybersecurity activities. The squad is also responsible for ensuring that the ING Group Security Policies and Standards are implemented in the business lines within its remit. These include risk assessments for applications and projects, Security Monitoring, Vulnerability Management, Security Incident Management and IT SOX Compliance etc. The IT Security team works in an agile framework.

This role is based in London and part of the UK IT Security squad (Hybrid working).

Main Duties and Responsibilities of Role:
Together with the people in your squad, you are responsible for implementing IT Security capabilities and delivering security & risk awareness throughout ING WB Tech, and more specifically within the UK teams.

Preferably you have already worked on IT Security topics and/or have a keen interest in IT Security, in order to participate to various technical (security) discussions and drive the integration of IT Security in the DevOps way of working. You will also help in coordinating and driving security projects or initiatives, and make sure WB UK is leveraging the latest security capabilities provided by ING Group.

The role is supporting all the facets of IT Security with a focus on activities such as:

• Assist in coordination and chairing Governance Forums
• Assist in delivering Security Dashboarding and Reporting
• Assist in coordinating Key Control and SOx Testing activities

• Provide Security Architecture and Design guidance
• Provide Application Security and Control Implementation guidance
• Assist with IT Security aspects on small & medium sized projects

• Perform 1st line security challenge and spot check assessments
• Assist in coordinating Penetration testing activities
• Assist in remediating Security Monitoring, Vulnerability and Patch Management issues
• Help execute Entity wide control and support evidencing

• Participate to Incident Readiness and Response (Tabletop, Red teaming)
• Review and follow-up on Data loss prevention issues
• Assist with ongoing Security Awareness Training towards all staff

Candidate Profile

Qualification/Education

Essential: You have a strong passion for IT Security and are looking to build a career in this field

Desirable: You have professional and intellectual IT skills at bachelor or university level or have recognised Information Security credentials

Experience/Knowledge

Essential: You have a proven experience in IT Security and/or are passionate about this field and want to further develop.

Desirable: You have a background in IT Engineering or IT Support areas.

Personal Competencies

Essential: You can work well as part of a team as well as own initiative, good timekeeper and well organised.
You have good communication and interpersonal skills and can interact with team members and customers.
You can inspire and show energy and passion, and also adopt a positive “Why?” mentality.
You have a strong willingness to learn and develop your technical and soft skills.

Desirable: You have experience/affinity with Wholesale Banking

ING Privacy Notice
In order to operate ING’s recruitment process, we will collect and store personal information you provide. Please read the attached privacy notice to understand how ING uses and protects this information.