{"id":1027704,"url":"https://alion.io/job/ing-group-third-party-assurance-supervisor","title":"Third Party Assurance Supervisor","company":{"id":3744,"name":"ING Group","domain":"ing.com","url":"https://alion.io/company/ing","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":112,"ghost_share":0.018,"stale_share":0.75,"repost_share":0.045,"time_to_fill_p50_days":29,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":50000,"max_usd":101000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":20},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"Docker","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kali Linux","optional":false},{"name":"Linux","optional":false},{"name":"Nessus","optional":false},{"name":"Red Teaming","optional":false},{"name":"SOC 2","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-09-18T12:23:58Z","employer_posted_date":"2026-09-18","last_verified_at":"2026-11-12T03:46:19Z","board_verified":true,"closed_at":null,"days_open":54,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":54},"description":"At ING Hubs Spain, we are building a new Cybersecurity organization from the ground up.\nThis is a unique opportunity to join a recently established and fast-growing international Hub, where you will not only contribute to Third-Party Cyber Risk Management activities but also help shape the future capabilities, processes, and culture of the team.\nAs a Third-Party Cyber Assurance Supervisor, you will play a key role in protecting ING against cyber risks arising from external suppliers and service providers that support critical business operations across the bank.\nThis role is fun and non-routine, it combines cybersecurity, risk management, technical assessments, supplier assurance, stakeholder management, and international exposure. You will work closely with global CISO teams, suppliers, risk professionals, and senior Management to independently assess cybersecurity risks and drive improvements across ING's third-party ecosystem.\nIf you are motivated by investigating complex environments, challenging the status quo, identifying cybersecurity risks, and influencing meaningful improvements across different industries, this role offers a unique opportunity to make a global impact.\nWhy is this role exciting?\nIn this role, you will:\nAssess the cybersecurity posture of critical suppliers supporting ING globally.\nLead, shape and drive inspections across the ING supply chain.\nWork on real-world cybersecurity risks affecting critical business services.\nPerform independent cybersecurity and physical data centre technical assessments.\nCollaborate with technical experts, suppliers, security teams, auditors, and senior stakeholders.\nContribute to ING's Third-Party Risk Management, Operational Resilience, and DORA objectives.\nGain international exposure through assessments of providers across different countries and industries.\nDevelop expertise across multiple technologies, cloud environments, cybersecurity domains, and regulatory frameworks.\nCoach new team members.\nJoin a growing Cybersecurity Hub and help shape its future direction.\nYour key responsibilities:\nAs a Third-Party Cyber Assurance Supervisor, you will:\nLead, plan, organize, and execute risk-based cybersecurity assessments and onsite inspections of ING's critical third-party providers.\nTogether with your team, independently evaluate the design and effectiveness of cybersecurity controls implemented by suppliers.\nAssess security governance, technology controls, operational resilience capabilities, and risk management practices.\nConduct interviews, documentation reviews, field inspections, configuration assessments, and technical security evaluations.\nIdentify cybersecurity risks, control weaknesses, and potential vulnerabilities impacting ING.\nInspect data centres supporting critical services, including the physical security, environmental controls, power path, antifire systems, etc.\nAnalyze findings and translate technical gaps into clear business risks and actionable recommendations.\nSupport the execution and evaluation of security testing activities, including penetration testing and red teaming results where applicable.\nProduce professional reports and executive-ready dashboards for senior management.\nSupport ING's Third-Party Risk Management and Operational Resilience objectives under DORA and other regulatory frameworks.\nCollaborate with global security, risk, procurement, operations, and audit teams.\nContribute to continuous improvement initiatives within Third-Party Cyber Risk Management.\nStay current on emerging threats, technologies, industry trends, and cybersecurity best practices.\nIdentify and implement automation opportunities through agentic artificial intelligence.\nTravel may be required as part of certain assessments, with an estimated travel requirement of approximately 6 to 8 weeks per year.\nWhat are we looking for?\nWe are looking for cybersecurity professionals who combine strong technical knowledge, risk awareness, critical thinking, and excellent communication skills.\nRequired qualifications\nBachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, IT Engineering, IT Risk Management or IT Audit.\n7-9 years of professional experience in Cybersecurity, IT Audit, Cyber Risk Management, Third-Party Risk Management, Information Security, or similar fields.\nStrong understanding of cybersecurity technologies and architecture.\nYou have a strong knowledge of IT processes and standards, market best practices (COBIT, ISO 27001, ISO 22001, etc.).\nGood understanding of risk management, governance frameworks, and the Three Lines Model.\nKnowledge of operating systems, networks, databases, identity and access management, cloud technologies, web technologies, software development practices, and containerization technologies.\nExperience performing audits, cybersecurity assessments, supplier reviews, or risk evaluations.\nStrong analytical and problem-solving skills.\nAbility to communicate complex technical topics to technical and non-technical audiences.\nExcellent stakeholder management and influencing skills.\nFluency in English, both written and spoken.\nAbility to work effectively in multicultural and international environments.\nYou'll get extra points for\nExperience within the banking or financial services sector.\nExperience supporting Operational Resilience or Third-Party Risk Management programs.\nExperience with penetration testing, red teaming, vulnerability assessments, or technical security testing.\nKnowledge of:DORA\nNIST Cybersecurity Framework\nISO 27001\nSOC 2\nCloud Security Frameworks\nNIS2\nOther EU regulatory frameworks\n\nHands-on experience with security tools such as Nessus, Burp Suite, Kali Linux, Wireshark, Docker, etc.\nExperience with scripting, data analytics, or automation tools.\nCertifications such as:CISSP\nCISA\nCEH\nOSCP\nISO 27001 Lead Auditor\n\nWhat do we offer?\nThe time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details.\nCheck out what is waiting for you!\nBe flexible my friend.\nOur model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.\nRestaurant card.\nSo that thinking about what to have for lunch doesn’t take up your time or your cravings.\nOur house will be your home.\nIn our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!\nHealth insurance.\nFor you and all your family (spouse/partner and children).\nLife insurance.\nWe help you protect what matters most to you.\nFlexible remuneration.\nIn addition, you will enjoy our flexible remuneration model, through a more tax-advantaged way, you will be able to access other services such as nursery, transport card, training aids…\nTransport allowance.\nIt doesn't matter where you live, we’ll help you get to the office.\nPension plan.\nYou can benefit from our pension plan after 1 month with us!\nDiscover ING Hubs Spain\nWe’re building something exciting-and we want you to be part of it.\nING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.\nWhat makes us different?\nWe have a tech-first mindset: We’re not just a bank-we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology.\nWe have global impact: You’ll be working on solutions that serve more than 34 million customers in over 38 countries.\nWe are agile: ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross-functional way of working.\nSustainability at the heart of what we do: We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact.\nAt ING, we believe indiversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning.\nWe’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose- we’re looking forward to meeting you.","description_format":"text","description_chars":8919,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning","Health insurance","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Information Security","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-09-18T12:23:58Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.512,"p_room":0.36,"age_days":53,"expected_fill_days":29,"reasons":["conf:7","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/ing-group-third-party-assurance-supervisor","json_url":"https://alion.io/job/ing-group-third-party-assurance-supervisor.json","meta":{"generated_at":"2026-11-12T08:11:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16442,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3744},"rest":"https://alion.io/mcp/rest/get_company?id=3744"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fing-group-third-party-assurance-supervisor"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fing-group-third-party-assurance-supervisor"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fing-group-third-party-assurance-supervisor"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ing-group-third-party-assurance-supervisor\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fing-group-third-party-assurance-supervisor"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1027704}},{"tool":"search_jobs","arguments":{"company":"ing.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1027704},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}