Non-Financial Risk officer for TFM in Amsterdam

Your role & work environment

Total Facility Management (TFM) is a specific form of outsourcing, whereby all operational Real Estate (RE) and Facility Services (FS) processes and associated management activities are outsourced. In your role you will primarily report hierarchically to the ‘manager Overarching functions’ and you have a functional line in the Non-Financial Risk department.

Implementation of TFM constitutes a transformational change aimed at reducing costs by increasing efficiency (economies of scale), simplifying by increasing standardisation, improving cost visibility/transparency and streamlining the ING organization, whilst maintaining or improving service levels

Implementation of TFM is in line with the ING strategy “unite”, as it simplifies and streamlines the FM and RE function, helping us to collaborate better across borders and innovate much.

As Non-Financial Risk Officer you will be working within the Core team which is responsible for successfully implementing and managing the TFM solution and supplier relationship.

As TFM implies a huge transformation the challenges for the Non-Financial Risk Officer is to make the various Non-Financial risks transparent and ensure that the required mitigating actions are initiated. This is done by creating an inventory of risks by category and by developing and implementing the necessary control systems to comply with the NFR guidelines, coordinating recurrent risk-related activities and providing operational assistance. Appropriate due diligence will need to ensure that the outsourced services are/or will become in accordance with ING’s (Non-Financial Risk) Standards and Policies.

Your key responsibilities

The design and implementation of a sound Internal Control Framework for the new TFM organisation on central and local country level (covering the whole process value chain from MSP to Supplier Service Organisations and subcontractors at all ING locations).  Performing deep dive gap analysis/ risk & control assessments in order to identify any potential gaps between ING Policies & standards and Supplier Controls.

As Global CREFS, we must provide the countries with the required SOC reports related to the Lease Administration process which is outsourced to an external supplier.

For this purpose we must provide sufficient evidence by;

• Validating the E2E process and determine the required operational controls;
• Clearly define the required operational controls in a PCDM and map against the provided controls/evidence by the external supplier (SOC1 report);
• Map the required IT controls against the evidence from the external supplier (SOC2 report);
• If there is a gap in the mapping (insufficient evidence for the required ING controls), additional evidence must be provided by the supplier;
• Create a test plan for SOC;
• Review the test results of the controls and provide mitigating measures if needed.

Besides securing the required SOC reports your key tasks include, but are not limited to:

• Steer risk and security awareness within the TFM organisation
• Recognize and articulate problems/risks related to the (implementation of) TFM
• Support the TFM organisation (T2 and T1) with coordination/documentation/monitoring of risk, compliance and security topics.
• Provide the required Sox 404 statements to the countries twice a year based on Sox Scope Agreements and in cooperation with CBRE.
• Perform fact finding, collecting evidence and documenting activities;
• Steer, coordinate, organize, challenge and periodically report upon the risks of the program (delivery risk) and on risk assessments on specific risks (security, IRM, compliance, BCM) – (result risk)
• Advise the TFM organisation on design/development of the required solutions, including scoping and fulfilling requirements.
• Lead and guide the efforts of others in specific areas and manage the commitments regarding deliverables.
• Liaison with tier 2 security, risk & compliance functions and with local (T1) representatives in these fields

How to succeed

Next to being a strong Orange Ambassador, when coordinating non-financial risk activities, you are/have:

• Working experience within the Non-Financial Risk domain
• Pragmatic & sound judgment
• Result and solution driven
• Experience with Sox, Soc1 and Soc2
• Preferably experience with outsourcing
• Able to plan, organise and work independently
• Business and risk minded
• Track record in the field of Information (Technology) Risk Management, possessing in-depth knowledge of IRM, IT and IT Security.
• ble to deal with and advise on complex and difficult matters
• Preferably good knowledge of the bank's structures, products and processes
• Convincing in communication, writing & reporting skills in English.

What we offer

A job from 36 to 40 hours and a unique offer that fits in with the times of today. We take into account your home situation and your ambitions and help you to balance work and private life. Discover yourself our employment
To give you an idea, we will tell you about the benefits of working at ING:

• A salary tailored to your qualities and experience
• Flexible working hours and the possibility to work at home
• A reimbursement for travel expenses
• 24 vacation days with a 36-hour working week. If you work 40 hours a week, you will receive 27 vacation days
• Pension scheme
• 13th month salary
• Individual Savings Contribution (BIS), 3.5% of your gross annual salary
• 8% Holiday payment
• Personal growth and challenging work with endless possibilities to realize your ambitions
• An informal working environment with innovative colleagues who strive for the very best
• Progressive way of working according to the Agile method, so that new ideas come to life