[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-third-party-assurance-supervisor-ing-hubs-spain-en-es":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":11,"featured_until":7,"is_active":12,"deactivated_at":7,"is_enriched":12,"processed_job_posting_json":13,"processed_latitude":93,"processed_longitude":94,"processed_employment_types":95,"processed_working_hours":96,"processed_working_hours_labels":98,"processed_home_office":99,"processed_salary_min":90,"processed_salary_max":91,"processed_salary_currency":87,"processed_salary_source":100,"processed_benefits":101,"processed_benefits_labels":110,"processed_industry":111,"processed_skills":7,"processed_job_location":112,"processed_full_address_gmaps":114,"processed_street_gmaps":116,"processed_city_gmaps":117,"processed_postal_code_gmaps":118,"processed_country_gmaps":119,"processed_country_iso_code_gmaps":121,"full_description":16,"formatted_description":122,"processed_employment_types_labels":34,"processed_home_office_labels":32,"processed_industry_labels":36,"processed_it_skills":123,"processed_it_skills_labels":125,"processed_soft_skills":126,"processed_soft_skills_labels":128,"processed_job_expertise_skills":129,"processed_job_expertise_skills_labels":130,"processed_language_requirements":131,"processed_total_experience_years":138,"processed_professional_field":139,"processed_professional_field_labels":142,"processed_leadership_role":12,"processed_date_posted":19,"raw_job_url":143,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":144,"canonical_industry_label":145,"max_cpc":146,"actual_cpc":7},73666,"third-party-assurance-supervisor-ing-hubs-spain","Third Party Assurance Supervisor",null,{"name":9,"slug":10,"logo_url":7},"ING HUBS SPAIN","ing-hubs-spain",false,true,{"@context":14,"@type":15,"title":6,"description":16,"hiringOrganization":17,"datePosted":19,"validThrough":20,"jobLocation":21,"jobLocationType":32,"employmentType":33,"industry":35,"skills":37,"baseSalary":85},"https:\u002F\u002Fschema.org\u002F","JobPosting","At ING Hubs Spain, we are building a new Cybersecurity organization from the ground up. This is a unique opportunity to join a recently established and fast-growing international Hub, where you will not only contribute to Third-Party Cyber Risk Management activities but also help shape the future capabilities, processes, and culture of the team. As a Third-Party Cyber Assurance Supervisor, you will play a key role in protecting ING against cyber risks arising from external suppliers and service providers that support critical business operations across the bank. This role is fun and non-routine, it combines cybersecurity, risk management, technical assessments, supplier assurance, stakeholder management, and international exposure. You will work closely with global CISO teams, suppliers, risk professionals, and senior Management to independently assess cybersecurity risks and drive improvements across ING's third-party ecosystem. If you are motivated by investigating complex environments, challenging the status quo, identifying cybersecurity risks, and influencing meaningful improvements across different industries, this role offers a unique opportunity to make a global impact. Why is this role exciting? In this role, you will: Assess the cybersecurity posture of critical suppliers supporting ING globally. Lead, shape and drive inspections across the ING supply chain. Work on real-world cybersecurity risks affecting critical business services. Perform independent cybersecurity and physical data centre technical assessments. Collaborate with technical experts, suppliers, security teams, auditors, and senior stakeholders. Contribute to ING's Third-Party Risk Management, Operational Resilience, and DORA objectives. Gain international exposure through assessments of providers across different countries and industries. Develop expertise across multiple technologies, cloud environments, cybersecurity domains, and regulatory frameworks. Coach new team members. Join a growing Cybersecurity Hub and help shape its future direction. Your key responsibilities: As a Third-Party Cyber Assurance Supervisor, you will: Lead, plan, organize, and execute risk-based cybersecurity assessments and onsite inspections of ING's critical third-party providers. Together with your team, independently evaluate the design and effectiveness of cybersecurity controls implemented by suppliers. Assess security governance, technology controls, operational resilience capabilities, and risk management practices. Conduct interviews, documentation reviews, field inspections, configuration assessments, and technical security evaluations. Identify cybersecurity risks, control weaknesses, and potential vulnerabilities impacting ING. Inspect data centres supporting critical services, including the physical security, environmental controls, power path, antifire systems, etc. Analyze findings and translate technical gaps into clear business risks and actionable recommendations. Support the execution and evaluation of security testing activities, including penetration testing and red teaming results where applicable. Produce professional reports and executive-ready dashboards for senior management. Support ING's Third-Party Risk Management and Operational Resilience objectives under DORA and other regulatory frameworks. Collaborate with global security, risk, procurement, operations, and audit teams. Contribute to continuous improvement initiatives within Third-Party Cyber Risk Management. Stay current on emerging threats, technologies, industry trends, and cybersecurity best practices. Identify and implement automation opportunities through agentic artificial intelligence. Travel may be required as part of certain assessments, with an estimated travel requirement of approximately 6 to 8 weeks per year. What are we looking for? We are looking for cybersecurity professionals who combine strong technical knowledge, risk awareness, critical thinking, and excellent communication skills. Required qualifications Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, IT Engineering, IT Risk Management or IT Audit. 7-9 years of professional experience in Cybersecurity, IT Audit, Cyber Risk Management, Third-Party Risk Management, Information Security, or similar fields. Strong understanding of cybersecurity technologies and architecture. You have a strong knowledge of IT processes and standards, market best practices (COBIT, ISO 27001, ISO 22001, etc.). Good understanding of risk management, governance frameworks, and the Three Lines Model. Knowledge of operating systems, networks, databases, identity and access management, cloud technologies, web technologies, software development practices, and containerization technologies. Experience performing audits, cybersecurity assessments, supplier reviews, or risk evaluations. Strong analytical and problem-solving skills. Ability to communicate complex technical topics to technical and non-technical audiences. Excellent stakeholder management and influencing skills. Fluency in English, both written and spoken. Ability to work effectively in multicultural and international environments. You'll get extra points for Experience within the banking or financial services sector. Experience supporting Operational Resilience or Third-Party Risk Management programs. Experience with penetration testing, red teaming, vulnerability assessments, or technical security testing. Knowledge of: DORA NIST Cybersecurity Framework ISO 27001 SOC 2 Cloud Security Frameworks NIS2 Other EU regulatory frameworks Hands-on experience with security tools such as Nessus, Burp Suite, Kali Linux, Wireshark, Docker, etc. Experience with scripting, data analytics, or automation tools. Certifications such as: CISSP CISA CEH OSCP ISO 27001 Lead Auditor What do we offer? The time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details. Check out what is waiting for you! Be flexible my friend. Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing. Restaurant card. So that thinking about what to have for lunch doesn’t take up your time or your cravings. Our house will be your home. In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more! Health insurance. For you and all your family (spouse\u002Fpartner and children). Life insurance. We help you protect what matters most to you. Flexible remuneration. In addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids… Transport allowance. It doesn't matter where you live, we’ll help you get to the office. Pension plan. You can benefit from our pension plan after 1 month with us! Discover ING Hubs Spain We’re building something exciting—and we want you to be part of it. ING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain. What makes us different? We have a tech-first mindset: We’re not just a bank—we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology. We have global impact: You’ll be working on solutions that serve more than 34 million customers in over 38 countries. We are agile: ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross-functional way of working. Sustainability at the heart of what we do: We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact. At ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning. We’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose—we’re looking forward to meeting you. Die ING ist eine globale Bank mit über 60.000 Mitarbeitenden. Wir sind für rund 38 Millionen Privat-Kundinnen und Kunden sowie für unsere Geschäfts- und Firmenkunden in über 40 Ländern da. Wir sind bunt, vielfältig, digital und stolz darauf. Lust uns kennenzulernen? Dich erwartet eine Kultur auf Augenhöhe, flexible Arbeitsweisen und die Chance, mit einem Job wirklich etwas zu verändern. Denn als globale Bank berühren wir das Leben von Millionen Menschen und wir streben danach einen positiven Einfluss auf die Gesellschaft und auf unseren Planeten zu haben. Selbstbestimmtes Arbeiten ist unser täglich Brot: Wir vertrauen unseren Mitarbeitenden und ermutigen sie, ihr Ding zu machen – also ihre Karriere so zu gestalten, wie es für sie am besten ist. Wir sind mehr als ein Arbeitgeber – wir sind innovativ, lösen Probleme, sind immer einen Schritt voraus und setzen uns dafür ein, einen echten Unterschied zu machen. Egal, ob Du gerade Deine Karriere startest oder die nächste große Herausforderung suchst, wir haben viele Jobmöglichkeiten, die Dich inspirieren und über Dich hinauswachsen lassen. Deine Zukunft bei der ING beginnt mit einer Bewerbung. Bist du bereit, Teil der ING zu werden? Wir haben viele Jobmöglichkeiten, die zu Deinen Fähigkeiten und Ambitionen passen! Verwende die Filter unter der Suchleiste, wie Standort und Jobtyp, um die perfekte Stelle zu finden. Starte jetzt mit der Suche und finde heraus, wohin Dich Dein nächster Karriereschritt führen könnte!",{"@type":18,"name":9},"Organization","2026-09-18","2027-09-18",[22],{"@type":23,"address":24,"geo":28},"Place",{"@type":25,"addressLocality":26,"addressCountry":27},"PostalAddress","Madrid","ES",{"@type":29,"latitude":30,"longitude":31},"GeoCoordinates",40.41672790000001,-3.7032905,"HYBRID",[34],"PERMANENT",[36],"Banking and Financial Services",[38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],"Nessus","Burp Suite","Kali Linux","Wireshark","Docker","Scripting","Data Analytics","Automation Tools","Cloud Technologies","Operating Systems","Networks","Databases","Identity and Access Management","Web Technologies","Containerization Technologies","Analytical Skills","Problem-Solving","Communication","Stakeholder Management","Influencing Skills","Ability to Work in Multicultural Environments","Coaching","Cybersecurity","IT Audit","Cyber Risk Management","Third-Party Risk Management","Information Security","Risk Management","Governance Frameworks","Three Lines Model","Operational Resilience","DORA","NIST Cybersecurity Framework","ISO 27001","SOC 2","NIS2","Penetration Testing","Red Teaming","Vulnerability Assessments","Security Testing","Data Centre Physical Security","Environmental Controls","Power Path","Antifire Systems","COBIT","ISO 22001","Software Development Practices",{"@type":86,"currency":87,"value":88},"MonetaryAmount","EUR",{"@type":89,"minValue":90,"maxValue":91,"unitText":92},"QuantitativeValue",60000,80000,"YEAR",[30],[31],"permanent",[97],"FULL_TIME",[97],"hybrid","estimated",[102,103,104,105,106,107,108,109],"Flexible working model","Restaurant card","On-site amenities (electric mobility solutions, doctor, hairdresser, gym, errand service)","Health insurance for employee and family","Life insurance","Flexible remuneration (nursery, transport card, training aids)","Transport allowance","Pension plan after 1 month",[102,103,104,105,106,107,108,109],"banking and financial services",[113],"ing, madrid (hubs spain), spanien",[115],"Madrid, Spanien",[],[26],[],[120],"Spanien",[27],"At ING Hubs Spain, we are building a new Cybersecurity organization from the ground up. This is a unique opportunity to join a recently established and fast-growing international Hub, where you will not only contribute to Third-Party Cyber Risk Management activities but also help shape the future capabilities, processes, and culture of the team.\n\nAs a Third-Party Cyber Assurance Supervisor, you will play a key role in protecting ING against cyber risks arising from external suppliers and service providers that support critical business operations across the bank. This role is fun and non-routine, it combines cybersecurity, risk management, technical assessments, supplier assurance, stakeholder management, and international exposure. You will work closely with global CISO teams, suppliers, risk professionals, and senior Management to independently assess cybersecurity risks and drive improvements across ING's third-party ecosystem. If you are motivated by investigating complex environments, challenging the status quo, identifying cybersecurity risks, and influencing meaningful improvements across different industries, this role offers a unique opportunity to make a global impact.\n\n## Why is this role exciting?\n\nIn this role, you will:\n\n- Assess the cybersecurity posture of critical suppliers supporting ING globally.\n- Lead, shape and drive inspections across the ING supply chain.\n- Work on real-world cybersecurity risks affecting critical business services.\n- Perform independent cybersecurity and physical data centre technical assessments.\n- Collaborate with technical experts, suppliers, security teams, auditors, and senior stakeholders.\n- Contribute to ING's Third-Party Risk Management, Operational Resilience, and DORA objectives.\n- Gain international exposure through assessments of providers across different countries and industries.\n- Develop expertise across multiple technologies, cloud environments, cybersecurity domains, and regulatory frameworks.\n- Coach new team members.\n- Join a growing Cybersecurity Hub and help shape its future direction.\n\n## Your key responsibilities:\n\nAs a Third-Party Cyber Assurance Supervisor, you will:\n\n- Lead, plan, organize, and execute risk-based cybersecurity assessments and onsite inspections of ING's critical third-party providers.\n- Together with your team, independently evaluate the design and effectiveness of cybersecurity controls implemented by suppliers.\n- Assess security governance, technology controls, operational resilience capabilities, and risk management practices.\n- Conduct interviews, documentation reviews, field inspections, configuration assessments, and technical security evaluations.\n- Identify cybersecurity risks, control weaknesses, and potential vulnerabilities impacting ING.\n- Inspect data centres supporting critical services, including the physical security, environmental controls, power path, antifire systems, etc.\n- Analyze findings and translate technical gaps into clear business risks and actionable recommendations.\n- Support the execution and evaluation of security testing activities, including penetration testing and red teaming results where applicable.\n- Produce professional reports and executive-ready dashboards for senior management.\n- Support ING's Third-Party Risk Management and Operational Resilience objectives under DORA and other regulatory frameworks.\n- Collaborate with global security, risk, procurement, operations, and audit teams.\n- Contribute to continuous improvement initiatives within Third-Party Cyber Risk Management.\n- Stay current on emerging threats, technologies, industry trends, and cybersecurity best practices.\n- Identify and implement automation opportunities through agentic artificial intelligence.\n- Travel may be required as part of certain assessments, with an estimated travel requirement of approximately 6 to 8 weeks per year.\n\n## What are we looking for?\n\nWe are looking for cybersecurity professionals who combine strong technical knowledge, risk awareness, critical thinking, and excellent communication skills.\n\n### Required qualifications\n\n- Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, IT Engineering, IT Risk Management or IT Audit.\n- 7-9 years of professional experience in Cybersecurity, IT Audit, Cyber Risk Management, Third-Party Risk Management, Information Security, or similar fields.\n- Strong understanding of cybersecurity technologies and architecture.\n- You have a strong knowledge of IT processes and standards, market best practices (COBIT, ISO 27001, ISO 22001, etc.).\n- Good understanding of risk management, governance frameworks, and the Three Lines Model.\n- Knowledge of operating systems, networks, databases, identity and access management, cloud technologies, web technologies, software development practices, and containerization technologies.\n- Experience performing audits, cybersecurity assessments, supplier reviews, or risk evaluations.\n- Strong analytical and problem-solving skills.\n- Ability to communicate complex technical topics to technical and non-technical audiences.\n- Excellent stakeholder management and influencing skills.\n- Fluency in English, both written and spoken.\n- Ability to work effectively in multicultural and international environments.\n\n### You'll get extra points for\n\n- Experience within the banking or financial services sector.\n- Experience supporting Operational Resilience or Third-Party Risk Management programs.\n- Experience with penetration testing, red teaming, vulnerability assessments, or technical security testing.\n- Knowledge of:\n- DORA\n- NIST Cybersecurity Framework\n- ISO 27001\n- SOC 2\n- Cloud Security Frameworks\n- NIS2\n- Other EU regulatory frameworks\n- Hands-on experience with security tools such as Nessus, Burp Suite, Kali Linux, Wireshark, Docker, etc.\n- Experience with scripting, data analytics, or automation tools.\n- Certifications such as:\n- CISSP\n- CISA\n- CEH\n- OSCP\n- ISO 27001 Lead Auditor\n\n## What do we offer?\n\nThe time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details. Check out what is waiting for you!\n\n- **Be flexible my friend.** Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self.\n- **Do your thing.** Restaurant card. So that thinking about what to have for lunch doesn’t take up your time or your cravings.\n- **Our house will be your home.** In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!\n- **Health insurance.** For you and all your family (spouse\u002Fpartner and children).\n- **Life insurance.** We help you protect what matters most to you.\n- **Flexible remuneration.** In addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids…\n- **Transport allowance.** It doesn't matter where you live, we’ll help you get to the office.\n- **Pension plan.** You can benefit from our pension plan after 1 month with us!\n\n## Discover ING Hubs Spain\n\nWe’re building something exciting—and we want you to be part of it.\n\nING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.\n\nWhat makes us different?\n\n- **We have a tech-first mindset:** We’re not just a bank—we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology.\n- **We have global impact:** You’ll be working on solutions that serve more than 34 million customers in over 38 countries.\n- **We are agile:** ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross-functional way of working.\n- **Sustainability at the heart of what we do:** We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact.\n\nAt ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning. We’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose—we’re looking forward to meeting you.\n\nDie ING ist eine globale Bank mit über 60.000 Mitarbeitenden. Wir sind für rund 38 Millionen Privat-Kundinnen und Kunden sowie für unsere Geschäfts- und Firmenkunden in über 40 Ländern da. Wir sind bunt, vielfältig, digital und stolz darauf. Lust uns kennenzulernen? Dich erwartet eine Kultur auf Augenhöhe, flexible Arbeitsweisen und die Chance, mit einem Job wirklich etwas zu verändern. Denn als globale Bank berühren wir das Leben von Millionen Menschen und wir streben danach einen positiven Einfluss auf die Gesellschaft und auf unseren Planeten zu haben. Selbstbestimmtes Arbeiten ist unser täglich Brot: Wir vertrauen unseren Mitarbeitenden und ermutigen sie, ihr Ding zu machen – also ihre Karriere so zu gestalten, wie es für sie am besten ist. Wir sind mehr als ein Arbeitgeber – wir sind innovativ, lösen Probleme, sind immer einen Schritt voraus und setzen uns dafür ein, einen echten Unterschied zu machen. Egal, ob Du gerade Deine Karriere startest oder die nächste große Herausforderung suchst, wir haben viele Jobmöglichkeiten, die Dich inspirieren und über Dich hinauswachsen lassen. Deine Zukunft bei der ING beginnt mit einer Bewerbung. Bist du bereit, Teil der ING zu werden? Wir haben viele Jobmöglichkeiten, die zu Deinen Fähigkeiten und Ambitionen passen! Verwende die Filter unter der Suchleiste, wie Standort und Jobtyp, um die perfekte Stelle zu finden. Starte jetzt mit der Suche und finde heraus, wohin Dich Dein nächster Karriereschritt führen könnte!",{"docker":124,"nessus":124,"networks":124,"databases":124,"scripting":124,"wireshark":124,"burp suite":124,"kali linux":124,"data analytics":124,"automation tools":124,"web technologies":124,"operating systems":124,"cloud technologies":124,"containerization technologies":124,"identity and access management":124},3,[38,39,40,41,42,43,44,45,46,47,48,49,50,51,52],{"analytical skills":127,"problem-solving":127,"communication":127,"stakeholder management":127,"influencing skills":127,"ability to work in multicultural environments":127,"coaching":124},4,[53,54,55,56,57,58,59],{"dora":124,"nis2":124,"cobit":124,"soc 2":124,"it audit":127,"iso 22001":124,"iso 27001":124,"power path":124,"red teaming":124,"cybersecurity":127,"risk management":127,"antifire systems":124,"security testing":124,"three lines model":124,"penetration testing":124,"information security":127,"cyber risk management":127,"governance frameworks":124,"environmental controls":124,"operational resilience":124,"vulnerability assessments":124,"third-party risk management":127,"nist cybersecurity framework":124,"data centre physical security":124,"software development practices":124},[60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],{"detected_language_jobad":132,"required":133},"en",[134],[135],{"language":136,"level":137},"ENGLISH","C1",8,[140,141],"Information and Communications Technology Service Managers","Security and Protective Services",[140,141],"https:\u002F\u002Fing.wd3.myworkdayjobs.com\u002Fde-de\u002Ficsgblcor\u002Fjob\u002Fmadrid-hubs-spain\u002Fthird-party-assurance-supervisor_req-10121707","banking","Banking",1]