Cloud Technology Risk Specialist

**It’s a fun and exciting time to join ING, Australia’s most recommended bank.**

As part of ING’s continued evolution, we are building our Cloud capability which has created an opportunity for a Cloud Technology Risk Specialist to join our team.

The primary purpose of this role is to provide risk advisory support to ING Australia’s Cloud Transformation Program as a Cloud Technology Risk Specialist, working alongside IT Security, Architecture, 2nd Line Risk and other key stakeholders.

The role will be instrumental in defining the practice ING needs to ensure technology risks related to cloud are appropriately considered and managed through the lifecycle, from cloud strategy, outsourcing, cloud transition planning and workload migration.

**What are you going to do?**

The Cloud Risk Specialist is responsible for ensuring cloud controls are identified, implemented, operated and monitored appropriately so that data and systems remain secure and compliant in the cloud environment and business outcomes are achieved.

You’ll be
- Identifying Regulatory, and ING Group requirements related to cloud risk and compliance, and ensure they are considered as part of solution design.
- Working closely with all key stakeholders to influence and design the cloud migration governance practice, operating model roles and responsibilities, cloud control lifecycle and framework, detailed cloud controls and security control assessments, and workload risk assessments.
- Overseeing and contributing to the preparation of cloud risk assessments for all cloud migrations to ensure a smooth transition.
- Influence best practices and common risk and security patterns for cloud and related security environment.
- Ensure cloud risk related issues and findings are being actively managed by risk and control owners as appropriate.
- Play a key role in overseeing the overarching governance and compliance of cloud activity

**What are we looking for?**

You’ll have
- 5+ years' experience of risk and/or control advisory in banking/financial services/professional services other relevant sector, and/or minimum 2+ years' experience in Cloud, Technology, Cyber or Operational Risk practitioner roles
- Understanding and knowledge of the relevant legislature and security roadmaps
- Working knowledge of risk assessment and management frameworks, processes, and tools
- Experience with the development of cyber security policies, standards, and process
- Understanding and knowledge of the relevant legislature and security roadmaps
- CCSP, CISM, CISA, CRISC, CGEIT, CDPSE, COBIT, ITIL, CISSP or other IT risk related certifications holder is desirable
- Familiarity with APRA standards or Cloud risk frameworks is desirable.

**About Us**

At ING, we want to make life simpler and more worthwhile - for everyone who banks with us, for the people who work with us, and the community at large, too.

When you come to work at ING, you’re joining a team where individuality isn’t just accepted, it’s encouraged. We’ve built a culture that’s fun, friendly and supportive - it’s the kind of place where you can be yourself and make the most of whatever you have to offer.

We give people the freedom to take risks, think differently, take ownership of their work, and make great things happen. We’re here to help you get ahead. And with our global network, there’s plenty of scope to take your career in new directions, perhaps even ones you’ve never considered.

Sound like the kind of place you’d feel at home? We’d love to hear from you.