Head of Information Risk Management

Work location: Brussels

Job Title: Lead NFR |||

Job level: 19

ING BE’s Non Financial Risk team

Non-Financial Risk (NFR) ING BE is a trusted business partner challenging and advising business and IT on performing balanced and pragmatic Non-Financial Risk Management. As second Line of Defense (2LoD), its main activities consist of identifying, assessing, monitoring, and reporting on non-financial risks. To achieve this, NFR sets and monitors policies and risk appetite statements, defines and monitors key risk indicators, objectively challenges the execution of non-financial risk management by the 1LoD and advises the organisation on NFR related topics.

Position Overview

The Head of Information Risk Management (IRM) is a leadership role responsible for developing, implementing, and overseeing the bank’s IT risk management framework. This position ensures that the bank’s information technology systems are secure, resilient, and aligned with regulatory requirements and business objectives. The role involves strategic oversight, risk governance, a strong pragmatic approach, and collaboration across business units to safeguard the bank’s digital assets and operations. The Head of IRM also leads and coaches a team of local and global experts, fostering a culture of accountability, growth, and excellence.

Key Responsibilities

• Challenge and enhance IT risk management execution implementing corrective actions where necessary.

• Continuously refine and optimize methodologies and procedures to ensure robust IT risk oversight and to support business management in effectively controlling IT risks within designated business processes.

• Foster strong relationships with strategic clients, serving as a trusted business partner to build professional credibility and mutual trust.

• Motivate stakeholders to commit fully to IT Risk objectives and drive exceptional performance in achieving IT risk management goals.

• Ensure the IT risk team possesses the necessary expertise, leveraging individual strengths for maximum impact

• Support the first-line and business stakeholders through specialist guidance on interpreting and applying IT risk policies and procedures, resolving queries and issues efficiently.

• Contribute to the development and enhancement of IT risk policies, procedures, ensuring alignment with established IT risk principles and compliance with internal and external regulatory requirements.

• Ensure that IT risks, issues, dependencies, and constraints are proactively managed at the project level. Where IT risks or issues threaten project delivery, develop and agree on recovery plans to mitigate impacts and maintain strategic alignment.

Qualifications & Experience

• A Master degree in IT or equivalent through experience

• Deep understanding of IT infrastructure, cybersecurity, and emerging technologies and risks

• Professional certifications such as CISM, CRISC, CISSP, or equivalent are highly desirable.

• Strong leadership and people management skills, with experience coaching and developing teams.

• Strong understating of ING’s IT Risk Control framework combined with a pragmatic risk-based approach with regards to its day-to-day use.

• Ability to influence, work effectively, across all levels of the organization including Exco level

• Very good knowledge of English, Dutch and/or French

• Very good problem solving, communication and self-organization skills

• Have a dynamic personality, take initiative and be flexible

• Willing to work in a constantly changing environment

• Be a team player