Data Risk Expert @ING Hubs Romania

Discover ING Hubs Romania
ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of over 2000 high-performing engineers, data, risk, and operations professionals.
We started out in 2015 as ING’s software development hub, then steadily expanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities.
Our tech capabilities remain the core of our business, with more than 1800 colleagues active in Data and Analytics Tech, Tech Foundation and Channels, Retail Core Banking and Architecture, and Global Products and Technology Services.
We enjoy a structured hybrid way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.
For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things, and they love doing it in good company. Do you?
Here’s a sneak peak of what our colleagues say about working within ING Hubs Romania:
At ING, we're building the solutions of tomorrow, today | 80% of our colleagues in Romania agree
The Mission
As a technology-enabled and digital-led bank, data is at the heart of everything we do. It powers how we measure risk, assess performance, and make decisions. To ensure we unlock the full value of our data, we must guarantee its completeness, accuracy, auditability, traceability, and protection. The Global Data Organisation serves as the first line of defence in securing robust data chains, working in close collaboration with all functions, business lines, and countries across the Bank.
The Global Chief Data & Analytics Office (CDAO) plays a pivotal role in this mission. As a central organizational unit, the CDAO partners with stakeholders across the enterprise to enable frictionless customer journeys, support ESG-driven innovation, and deliver data products that enhance decision-making. With emerging trends such as digital wallets on the horizon and increasing regulatory expectations around data governance, the CDAO is evolving to meet these challenges head-on, ensuring our data remains both a strategic asset and a safeguarded resource.
As part of the Global CDAO organization, the Global Data Management department is tasked with developing our design capabilities and establishing a comprehensive mandate for data frameworks and controls. The team defines, maintains, and continually enhances ING's global standards in areas such as Data Governance, Data Quality, Lineage, BCBS239 Reporting, End User Computing, AI and Data Ethics, Data Privacy, ensuring uniform application throughout the Bank and full alignment with both regulatory requirements (including BCBS239, GDPR, EU AI Act, DORA) and ING’s business objectives.
The Data Risk Expert defines, embeds, and oversees the enterprise-wide data risk management capability, ensuring effective management of data risk in line with internal standards and regulatory requirements. The role covers key risk areas including Data Governance & Architecture, Data Quality, Reporting, Data Ethics, and AI/(Gen)AI Data.
The role acts as a key enabler of the first line of defence, working closely with business and country domains, CDOs, and data owners to ensure data risks are proactively identified, assessed, and mitigated. It also ensures that data-related control frameworks (e.g., Data Management, BCBS239, and NFR controls) are effectively implemented and monitored.
The Data Risk Expert drives the uplift of data risk maturity through a single, consistent approach to defining, measuring, and managing data risk across all countries and domains, embedding risk-by-design into data products, platforms, and processes, and integrating data risk into strategic initiatives, transformation programs, and regulatory commitments. Ultimately, the role safeguards the bank’s ability to rely on data for risk management, regulatory reporting, and decision-making, while providing senior management and regulators with transparent, actionable insight into data risk exposure.
As Data Risk Expert you demonstrate a highly pragmatic, hands-on approach and bring a strong proactive, go-getter mindset.
Your day to day
As a Data Risk Expert, you are responsible for overseeing multiple data risk domains and their associated activities:
Bank-wide RCSA (GDM Control Standards, Data Protection, AI/Ethics)
Lead and coordinate end-to-end RCSA process across all GDM Control Standards, Data Protection, and AI/Ethics
Drive kick-off, methodology, and instructions for stakeholders and ensure follow-up on identified risks and issues
Consolidate and deliver reporting and insights (report-out)
Define and monitor risk responses and mitigation actions
Align with 2nd Line Data Risk on reporting of 1st Line risks and issues (MT, Data Risk Committee, BNFRC)
Co-develop and maintain the Data Management risk appetite statement (in collaboration with 2LoD)
KCM Approach & Planning
Define scope and approach for Key Control Monitoring (KCM) across all 3 GDM Control Standards (Test of Design / Effectiveness)
Provide oversight on annual KCM planning, coordination, and timelines
Ensure alignment with NFR procedures and required testing timelines
Align with ODCR on resource allocation and delivery planning
Maintain and oversee control implementation tracking (KCT, Attestations, Continuous Monitoring)
KRIs (Key Risk Indicators)
Define and maintain data-related KRIs aligned with risk framework
Own and coordinate KRI reporting (via iRisk)
Monitor threshold breaches and risk signals
Assess impact of data risk exposure
Provide management reporting (MT) on risk exposure and progress
Align with 2nd Line Data Risk (policy owner) on KRI definitions and reporting
iRisk (MIA & CAS Items)
Provide end-to-end oversight of iRisk items (global and local)
Monitor and follow up on remediation actions and progress
Register and track waivers and deviations
Ensure alignment with risk issue owners and CAS teams
Drive closure of iRisk issues (including: Preparation of closure memos and Collection and validation of supporting evidence)
Data Ethics
Establish and oversee data ethics governance
Safeguard ethical use of data across the Lifecycle
Ensure compliance with data ethics principles and regulations