It Risk Ops Expert Milano

It Risk Ops Expert
Milano
Lombardia, Milano

The Senior IT Risk Analyst will be accountable for delivering all Risk Management activities within the CTO department. She/he will be responsible for tracking the remediation and efforts following the provided information, supporting stakeholders and aiding them in prioritizing those efforts through assessing the risk severity. The successful candidate will contribute as a Risk Subject Matter Expert to designing, implementing, and supporting OT/IT technology solutions and OT best practices within Italy/Holland sites. This role works within the Platform Tribe team, liaising with other cyber security, Networking and Tribes units and ensuring all the landscapes are secure and compliant with company requirements (global/local). Key responsibilities: Continuously identify, assess, measure and monitor information technology risk by performing hands-on risk assessments. Perform evidence-based information security risk assessments for internal and external systems and applications, providing position statements with recommended action items and options, including impact analysis to ensure information resources are adequately protected with appropriate security controls that ensure compliance with policy and standards. Work closely with other Risk units, Internal Audit, Procurement, & Compliance, to identify compliance baselines from regulatory requirements and corporate objectives. Support key initiatives designed to identify emerging risks that could impact our ability to deliver on our strategic objectives. Participate in trend analyses to develop conclusions and make recommendations to relevant parties. Serve as a trusted risk advisor. Perform assessments on the impact of strategic changes on our technology landscape. Contribute to the development of whitepapers, assessments, and briefs based on research that can be leveraged to drive change and create heightened awareness. Responsible for working with the Service Providers. Responsible for ensuring the highest level of service availability and efficiency as benchmarked against industry standards and consistent with enterprise goals and constraints. Provides oversight and instruction for Patching, Vulnerability and Infrastructure Lifecycle delivery. Demonstrates strong ability in engineering processes with an understanding of Agile methodologies. Support the design of new on-premise and cloud-based data center technologies in collaboration with key stakeholders to support Operational technologies following a Risk-based approach. Requirements BS/BA in Information Technology or Business and a minimum of 5 years relevant work experience in information security, risk, or controls. Understanding of information frameworks (ISO27001, NIST, COBIT). CRISC, CISSP, CISA, CISM, ISO27001 Lead Auditor Highly preferred. Deep experience with ITIL or ISO 20000 and PM Methodologies (Agile, PMO or PRINCE2). Excel advanced level. Soft Skills Leadership Excellent relational skills Teamwork Management skills and interaction with stakeholders Customer Centricity Excellence in execution Duration: Permanent About ING The benefits of joining ING Super flexible smart working Competitive base salaries and performance based bonuses Diverse cultures & Innovative mindsets International Environment Commitment to sustainability Lots of training development opportunities to help you grow Lots of moments dedicated to physical and mental well-being A special day off when it is your birthday: we call it doyourbirthday And of course we can't forget: free water & coffee at the office Our Commitment Diversity is a fundamental element of our corporate culture, and we are fully committed to creating a safe and inclusive environment, based on mutual respect and the value of diversity, offering equal job opportunities to all qualified candidates. J-18808-Ljbffr