Data Risk Expert @ING Hubs Romania

Discover ING Hubs Romania 
ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of over 2000 high-performing engineers, data, risk, and operations professionals.  
We started out in 2015 as ING’s software development hub, then steadily expanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities. 
Our tech capabilities remain the core of our business, with more than 1800 colleagues active in Data and Analytics Tech, Tech Foundation and Channels, Retail Core Banking and Architecture, and Global Products and Technology Services.  
We enjoy a structured hybrid way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.   
For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things, and they love doing it in good company. Do you?   
Here’s a sneak peak of what our colleagues say about working within ING Hubs Romania: 
At ING, we're building the solutions of tomorrow, today | 80% of our colleagues in Romania agree 
 
The Mission 
As a technology-enabled and digital-led bank, data is at the heart of everything we do. It powers how we measure risk, assess performance, and make decisions. To ensure we unlock the full value of our data, we must guarantee its completeness, accuracy, auditability, traceability, and protection. The Global Data Organisation serves as the first line of defence in securing robust data chains, working in close collaboration with all functions, business lines, and countries across the Bank.  
The Global Chief Data & Analytics Office (CDAO) plays a pivotal role in this mission. As a central organizational unit, the CDAO partners with stakeholders across the enterprise to enable frictionless customer journeys, support ESG-driven innovation, and deliver data products that enhance decision-making. With emerging trends such as digital wallets on the horizon and increasing regulatory expectations around data governance, the CDAO is evolving to meet these challenges head-on, ensuring our data remains both a strategic asset and a safeguarded resource.  
  
As part of the Global CDAO organization, the Global Data Management department is tasked with developing our design capabilities and establishing a comprehensive mandate for data frameworks and controls. The team defines, maintains, and continually enhances ING's global standards in areas such as Data Governance, Data Quality, Lineage, BCBS239 Reporting, End User Computing, AI and Data Ethics, Data Privacy, ensuring uniform application throughout the Bank and full alignment with both regulatory requirements (including BCBS239, GDPR, EU AI Act, DORA) and ING’s business objectives.  
The Data Risk Expert defines, embeds, and oversees the enterprise-wide data risk management capability, ensuring effective management of data risk in line with internal standards and regulatory requirements. The role covers key risk areas including Data Governance & Architecture, Data Quality, Reporting, Data Ethics, and AI/(Gen)AI Data.  
The role acts as a key enabler of the first line of defence, working closely with business and country domains, CDOs, and data owners to ensure data risks are proactively identified, assessed, and mitigated. It also ensures that data-related control frameworks (e.g., Data Management, BCBS239, and NFR controls) are effectively implemented and monitored.  
 The Data Risk Expert drives the uplift of data risk maturity through a single, consistent approach to defining, measuring, and managing data risk across all countries and domains, embedding risk-by-design into data products, platforms, and processes, and integrating data risk into strategic initiatives, transformation programs, and regulatory commitments. Ultimately, the role safeguards the bank’s ability to rely on data for risk management, regulatory reporting, and decision-making, while providing senior management and regulators with transparent, actionable insight into data risk exposure.  
As Data Risk Expert you demonstrate a highly pragmatic, hands-on approach and bring a strong proactive, go-getter mindset.  
 
Your day to day 
As a Data Risk Expert, you are responsible for overseeing multiple data risk domains and their associated activities:  
  
Bank-wide RCSA (GDM Control Standards, Data Protection, AI/Ethics)  
Lead and coordinate end-to-end RCSA process across all GDM Control Standards, Data Protection, and AI/Ethics  
Drive kick-off, methodology, and instructions for stakeholders and ensure follow-up on identified risks and issues  
Consolidate and deliver reporting and insights (report-out)  
Define and monitor risk responses and mitigation actions  
Align with 2nd Line Data Risk on reporting of 1st Line risks and issues (MT, Data Risk Committee, BNFRC)  
Co-develop and maintain the Data Management risk appetite statement (in collaboration with 2LoD)  
  
KCM Approach & Planning  
Define scope and approach for Key Control Monitoring (KCM) across all 3 GDM Control Standards (Test of Design / Effectiveness)  
Provide oversight on annual KCM planning, coordination, and timelines  
Ensure alignment with NFR procedures and required testing timelines  
Align with ODCR on resource allocation and delivery planning  
Maintain and oversee control implementation tracking (KCT, Attestations, Continuous Monitoring)  
  
KRIs (Key Risk Indicators)  
Define and maintain data-related KRIs aligned with risk framework  
Own and coordinate KRI reporting (via iRisk)  
Monitor threshold breaches and risk signals  
Assess impact of data risk exposure  
Provide management reporting (MT) on risk exposure and progress  
Align with 2nd Line Data Risk (policy owner) on KRI definitions and reporting  
  
iRisk (MIA & CAS Items)  
Provide end-to-end oversight of iRisk items (global and local)  
Monitor and follow up on remediation actions and progress  
Register and track waivers and deviations  
Ensure alignment with risk issue owners and CAS teams  
Drive closure of iRisk issues (including: Preparation of closure memos and Collection and validation of supporting evidence)  
  
Data Ethics  
Establish and oversee data ethics governance  
Safeguard ethical use of data across the Lifecycle  
Ensure compliance with data ethics principles and regulations  
Drive data ethics risk identification and mitigation  
Oversee data ethics committees and decision-making  
Define and monitor data ethics metrics (KRIs/KPIs)  
Enable data ethics awareness and culture  
 
What you’ll bring to the team 
We are looking for a results-driven professional with a strong bias for execution, capable of delivering large scale initiatives in complex environments. The ideal candidate demonstrates sharp regulatory insights, solves problems effectively, and influences others through collaboration and active listening. 
 
Mandatory: 
Proven experience with control standard implementation, monitoring, and stakeholder management  
Excellent organizational, analytical, and communication skills  
Experience in process optimization, automation, and Agile delivery methodologies  
Ability to explain complex issues in a clear, compelling way to gain buy-in  
Excellent level of English 
Nice to have:   
Experience in regulatory reporting, audit, or control design, ideally in banking  
Strong knowledge of data management, ethics, reporting control frameworks, and regulatory requirements  
Education: master or bachelor’s degree in relevant field 
If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on our website (make sure to scroll until you reach the Data Protection section/ Candidates tab).