[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-it-security-officer-iam-expert-ing-luxembourg-sa-de-lu":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":12,"featured_until":7,"is_active":13,"deactivated_at":7,"is_enriched":13,"processed_job_posting_json":14,"processed_latitude":60,"processed_longitude":62,"processed_employment_types":7,"processed_working_hours":64,"processed_working_hours_labels":66,"processed_home_office":67,"processed_salary_min":57,"processed_salary_max":58,"processed_salary_currency":54,"processed_salary_source":68,"processed_benefits":69,"processed_benefits_labels":70,"processed_industry":71,"processed_skills":7,"processed_job_location":72,"processed_full_address_gmaps":74,"processed_street_gmaps":76,"processed_city_gmaps":77,"processed_postal_code_gmaps":78,"processed_country_gmaps":79,"processed_country_iso_code_gmaps":80,"full_description":17,"formatted_description":82,"processed_employment_types_labels":7,"processed_home_office_labels":22,"processed_industry_labels":24,"processed_it_skills":83,"processed_it_skills_labels":86,"processed_soft_skills":87,"processed_soft_skills_labels":88,"processed_job_expertise_skills":89,"processed_job_expertise_skills_labels":90,"processed_language_requirements":91,"processed_total_experience_years":102,"processed_professional_field":103,"processed_professional_field_labels":106,"processed_leadership_role":12,"processed_date_posted":20,"raw_job_url":107,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":71,"canonical_industry_label":24,"max_cpc":108,"actual_cpc":7},93651,"it-security-officer-iam-expert-ing-luxembourg-sa","IT Security Officer - IAM Expert",null,{"name":9,"slug":10,"logo_url":11},"ING Luxembourg SA","ing-luxembourg-sa","https:\u002F\u002Fwww.ing.de\u002Fbinaries\u002Fcontent\u002Fgallery\u002Fing-images\u002Fuber-uns\u002Fpresse\u002Fpressebilder\u002Fing_logo-72dpi_rgb.jpg",false,true,{"@context":15,"@type":16,"title":6,"description":17,"hiringOrganization":18,"datePosted":20,"validThrough":21,"jobLocationType":22,"industry":23,"skills":25,"baseSalary":52},"https:\u002F\u002Fschema.org\u002F","JobPosting","Your role & work environment You will be the main local owner of Identity and Access Management (IAM) governance and control activities, while also supporting the broader activities of the Tech Security Team of ING Luxembourg. As part of, and local point of contact for, the IAM Centre of Excellence (CoE) (which is partially located outside Luxembourg), you will oversee the IAM controls; analyze IAM risks and control gaps; provide specialist advice to local stakeholders; and coordinate timely remediation. You will also perform first-line monitoring and SOX control testing and contribute to broader IT security governance, risk and control activities performed by the overarching Tech Security team. You will join a team of Security Officers working in English and French. IAM governance and controls will be your principal area of ownership, while team members support one another across their respective IT risk domains and share responsibility for day-to-day security governance, risk and control activities. The team works closely with Technology, Information Risk Management, the IAM CoE, the CIO management team and other ING entities. Your key responsibilities IAM governance and controls Own and coordinate local IAM governance and controls with the IAM CoE, supporting technology teams and control owners. Implement, monitor and improve IAM controls in line with ING Group standards, SOX requirements and local obligations. Perform first-line monitoring and KCT and SOX testing, including evidence review, documentation and assessment of control effectiveness. IAM risk, remediation and stakeholder support Analyze IAM risks, control gaps and recurring access issues; identify root causes, track remediation, validate closure and escalate material issues. Recommend improvements to IAM processes, controls and technologies, and support audits, assurance reviews and regulatory requests. Advise technology and business stakeholders on IAM requirements, access-control questions and exceptions. Broader IT security governance, risk and control activities Dedicate an agreed portion of the role to broader IT security governance, risk and control activities, including risk assessments, security reviews, incident analysis, audit and regulatory support, reporting and risk remediation follow-up We look for A colleague with a talent for taking it on and making it happen, enthusiasm for helping others to be successful and a knack for always being a step ahead. In other words, you strive to bring fresh ideas to life and embrace challenges in a fast changing and complex environment. You are a naturally collaborative person who listens and invests in others to achieve common goals. You love to challenge the status quo and are eager to propose creative solutions to problems. As an IT Security Officer with a focus on IAM you will also need: Master’s degree in information security, computer science, risk management or a related field, or equivalent professional experience. At least five years of relevant experience in IAM, IT security, IT risk, internal controls or technology assurance, including independent ownership of IAM governance or control activities. Functional knowledge of ING’s IAM processes, such as joiner-mover-leaver, access provisioning, privileged access, periodic access reviews, segregation of duties, authentication and authorization controls. A thorough technical understanding of identity governance, privileged access management, directory services, authentication and access-certification platforms. Ability to interpret policies, standards and regulatory requirements and translate them into practical control expectations and actions. Hands-on experience in control design or testing, evidence assessment, deficiency management and remediation, with the ability to translate requirements into practical controls. Strong ownership, planning and coordination skills, with the ability to manage recurring control activities and deadlines independently. A rigorous, evidence-based approach with close attention to completeness, accuracy and auditability. Strong analytical skills and the ability to translate control weaknesses into clear risks, actions and priorities. Effective communication and stakeholder management across technical and non-technical audiences, including the ability to challenge constructively. A collaborative, pragmatic and delivery-focused mindset, with the flexibility to support broader IT Security priorities. Fluent written and spoken English is required. The following would be advantageous: Working knowledge of French is a (big) advantage. Experience with SOX IT general controls or comparable assurance requirements, preferably in financial services. Knowledge of ISO 27001, NIST Cybersecurity Framework, COBIT and DORA. A relevant certification, such as CISA, CISM, CISSP, CRISC, CGEIT or ISO 27001 Lead Auditor, and experience working with central expertise and assurance functions. Experience working across local and international teams, central centers of expertise, auditors and other assurance functions. We redefine banking. What about you? There has never been a more interesting time to work at ING. We’re on a journey that’s centred around our customers, powered by technology and driven by smart, determined people. Our customers feel our people are empowering them to stay a step ahead in life and in business. We’re proud of that! Die ING ist eine globale Bank mit über 60.000 Mitarbeitenden. Wir sind für rund 38 Millionen Privat-Kundinnen und Kunden sowie für unsere Geschäfts- und Firmenkunden in über 40 Ländern da. Wir sind bunt, vielfältig, digital und stolz darauf. Lust uns kennenzulernen? Dich erwartet eine Kultur auf Augenhöhe, flexible Arbeitsweisen und die Chance, mit einem Job wirklich etwas zu verändern. Denn als globale Bank berühren wir das Leben von Millionen Menschen und wir streben danach einen positiven Einfluss auf die Gesellschaft und auf unseren Planeten zu haben. Selbstbestimmtes Arbeiten ist unser täglich Brot: Wir vertrauen unseren Mitarbeitenden und ermutigen sie, ihr Ding zu machen – also ihre Karriere so zu gestalten, wie es für sie am besten ist. Wir sind mehr als ein Arbeitgeber – wir sind innovativ, lösen Probleme, sind immer einen Schritt voraus und setzen uns dafür ein, einen echten Unterschied zu machen. Egal, ob Du gerade Deine Karriere startest oder die nächste große Herausforderung suchst, wir haben viele Jobmöglichkeiten, die Dich inspirieren und über Dich hinauswachsen lassen. Deine Zukunft bei der ING beginnt mit einer Bewerbung. Bist du bereit, Teil der ING zu werden? Wir haben viele Jobmöglichkeiten, die zu Deinen Fähigkeiten und Ambitionen passen! Verwende die Filter unter der Suchleiste, wie Standort und Jobtyp, um die perfekte Stelle zu finden. Starte jetzt mit der Suche und finde heraus, wohin Dich Dein nächster Karriereschritt führen könnte!",{"@type":19,"name":9},"Organization","2026-10-19","2027-10-19","HYBRID",[24],"Banking",[26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51],"Identity and Access Management (IAM)","Privileged Access Management","Directory Services","Authentication and Authorization Controls","Access Certification Platforms","SOX Testing","Ownership","Planning and Coordination","Analytical Skills","Communication","Stakeholder Management","Collaboration","Attention to Detail","Constructive Challenge","IAM Governance","IT Security","IT Risk Management","Internal Controls","Technology Assurance","SOX Compliance","ISO 27001","NIST Cybersecurity Framework","COBIT","DORA","Audit Support","Regulatory Compliance",{"@type":53,"currency":54,"value":55},"MonetaryAmount","EUR",{"@type":56,"minValue":57,"maxValue":58,"unitText":59},"QuantitativeValue",70000,100000,"YEAR",[61],49.815273,[63],6.129582999999999,[65],"FULL_TIME",[65],"hybrid","estimated",[],[],"banking",[73],"ing, luxembourg (siège lux house), luxemburg",[75],"Luxemburg",[],[],[],[75],[81],"LU","## Your role & work environment\n\nYou will be the main local owner of Identity and Access Management (IAM) governance and control activities, while also supporting the broader activities of the Tech Security Team of ING Luxembourg. As part of, and local point of contact for, the IAM Centre of Excellence (CoE) (which is partially located outside Luxembourg), you will oversee the IAM controls; analyze IAM risks and control gaps; provide specialist advice to local stakeholders; and coordinate timely remediation. You will also perform first-line monitoring and SOX control testing and contribute to broader IT security governance, risk and control activities performed by the overarching Tech Security team.\n\nYou will join a team of Security Officers working in English and French. IAM governance and controls will be your principal area of ownership, while team members support one another across their respective IT risk domains and share responsibility for day-to-day security governance, risk and control activities. The team works closely with Technology, Information Risk Management, the IAM CoE, the CIO management team and other ING entities.\n\n## Your key responsibilities\n\n### IAM governance and controls\n\n- Own and coordinate local IAM governance and controls with the IAM CoE, supporting technology teams and control owners.\n- Implement, monitor and improve IAM controls in line with ING Group standards, SOX requirements and local obligations.\n- Perform first-line monitoring and KCT and SOX testing, including evidence review, documentation and assessment of control effectiveness.\n\n### IAM risk, remediation and stakeholder support\n\n- Analyze IAM risks, control gaps and recurring access issues; identify root causes, track remediation, validate closure and escalate material issues.\n- Recommend improvements to IAM processes, controls and technologies, and support audits, assurance reviews and regulatory requests.\n- Advise technology and business stakeholders on IAM requirements, access-control questions and exceptions.\n\n### Broader IT security governance, risk and control activities\n\n- Dedicate an agreed portion of the role to broader IT security governance, risk and control activities, including risk assessments, security reviews, incident analysis, audit and regulatory support, reporting and risk remediation follow-up\n\n## We look for\n\nA colleague with a talent for taking it on and making it happen, enthusiasm for helping others to be successful and a knack for always being a step ahead. In other words, you strive to bring fresh ideas to life and embrace challenges in a fast changing and complex environment. You are a naturally collaborative person who listens and invests in others to achieve common goals. You love to challenge the status quo and are eager to propose creative solutions to problems.\n\nAs an IT Security Officer with a focus on IAM you will also need:\n\n- Master’s degree in information security, computer science, risk management or a related field, or equivalent professional experience.\n- At least five years of relevant experience in IAM, IT security, IT risk, internal controls or technology assurance, including independent ownership of IAM governance or control activities.\n- Functional knowledge of ING’s IAM processes, such as joiner-mover-leaver, access provisioning, privileged access, periodic access reviews, segregation of duties, authentication and authorization controls.\n- A thorough technical understanding of identity governance, privileged access management, directory services, authentication and access-certification platforms.\n- Ability to interpret policies, standards and regulatory requirements and translate them into practical control expectations and actions.\n- Hands-on experience in control design or testing, evidence assessment, deficiency management and remediation, with the ability to translate requirements into practical controls.\n- Strong ownership, planning and coordination skills, with the ability to manage recurring control activities and deadlines independently.\n- A rigorous, evidence-based approach with close attention to completeness, accuracy and auditability.\n- Strong analytical skills and the ability to translate control weaknesses into clear risks, actions and priorities.\n- Effective communication and stakeholder management across technical and non-technical audiences, including the ability to challenge constructively.\n- A collaborative, pragmatic and delivery-focused mindset, with the flexibility to support broader IT Security priorities.\n- Fluent written and spoken English is required.\n\nThe following would be advantageous:\n\n- Working knowledge of French is a (big) advantage.\n- Experience with SOX IT general controls or comparable assurance requirements, preferably in financial services.\n- Knowledge of ISO 27001, NIST Cybersecurity Framework, COBIT and DORA.\n- A relevant certification, such as CISA, CISM, CISSP, CRISC, CGEIT or ISO 27001 Lead Auditor, and experience working with central expertise and assurance functions.\n- Experience working across local and international teams, central centers of expertise, auditors and other assurance functions.\n\n## We redefine banking. What about you?\n\nThere has never been a more interesting time to work at ING. We’re on a journey that’s centred around our customers, powered by technology and driven by smart, determined people. Our customers feel our people are empowering them to stay a step ahead in life and in business. We’re proud of that!\n\nDie ING ist eine globale Bank mit über 60.000 Mitarbeitenden. Wir sind für rund 38 Millionen Privat-Kundinnen und Kunden sowie für unsere Geschäfts- und Firmenkunden in über 40 Ländern da. Wir sind bunt, vielfältig, digital und stolz darauf. Lust uns kennenzulernen? Dich erwartet eine Kultur auf Augenhöhe, flexible Arbeitsweisen und die Chance, mit einem Job wirklich etwas zu verändern. Denn als globale Bank berühren wir das Leben von Millionen Menschen und wir streben danach einen positiven Einfluss auf die Gesellschaft und auf unseren Planeten zu haben. Selbstbestimmtes Arbeiten ist unser täglich Brot: Wir vertrauen unseren Mitarbeitenden und ermutigen sie, ihr Ding zu machen – also ihre Karriere so zu gestalten, wie es für sie am besten ist. Wir sind mehr als ein Arbeitgeber – wir sind innovativ, lösen Probleme, sind immer einen Schritt voraus und setzen uns dafür ein, einen echten Unterschied zu machen. Egal, ob Du gerade Deine Karriere startest oder die nächste große Herausforderung suchst, wir haben viele Jobmöglichkeiten, die Dich inspirieren und über Dich hinauswachsen lassen. Deine Zukunft bei der ING beginnt mit einer Bewerbung. Bist du bereit, Teil der ING zu werden? Wir haben viele Jobmöglichkeiten, die zu Deinen Fähigkeiten und Ambitionen passen! Verwende die Filter unter der Suchleiste, wie Standort und Jobtyp, um die perfekte Stelle zu finden. Starte jetzt mit der Suche und finde heraus, wohin Dich Dein nächster Karriereschritt führen könnte!",{"sox testing":84,"directory services":84,"privileged access management":84,"access certification platforms":84,"identity and access management (iam)":85,"authentication and authorization controls":84},3,4,[26,27,28,29,30,31],{"ownership":85,"planning and coordination":85,"analytical skills":85,"communication":85,"stakeholder management":85,"collaboration":85,"attention to detail":85,"constructive challenge":84},[32,33,34,35,36,37,38,39],{"dora":84,"cobit":84,"iso 27001":84,"it security":85,"audit support":84,"iam governance":85,"sox compliance":84,"internal controls":85,"it risk management":85,"technology assurance":85,"regulatory compliance":84,"nist cybersecurity framework":84},[40,41,42,43,44,45,46,47,48,49,50,51],{"detected_language_jobad":92,"required":93},"en",[94,98],[95],{"language":96,"level":97},"ENGLISH","C1",[99],{"language":100,"level":101},"FRENCH","B2",5,[104,105],"Information and Communications Technology Service Managers","Database and Network Professionals",[104,105],"https:\u002F\u002Fing.wd3.myworkdayjobs.com\u002Fde-de\u002Ficsgblcor\u002Fjob\u002Fluxembourg-sige-lux-house\u002Fit-security-officer---iam-expert_req-10123473",1]