Associate, IT Governance Specialist

• REQ-10121536
• 15/09/2026
• Business Control
• New York, New York
• ING Bank

Americas Technology | Infrastructure Technology | Associate, IT Governance Specialist | New York

About ING:

In the Americas, ING’s Wholesale Banking division offers a broad range of innovative financial products and services to domestic and international corporate and institutional clients.

When you come to work at ING, you’re joining a team where individuality isn’t just accepted, it’s encouraged. We’ve built a culture that’s fun, friendly and supportive – it’s the kind of place where you can be yourself and make the most of whatever you have to offer.

We give people the freedom to take risks, think differently, take ownership of their work, and make great things happen. We’re here to help you get ahead. And with our global network, there’s plenty of scope to take your career in new directions, perhaps even ones you’ve never considered. ING Americas follows a hybrid work model, allowing for in-office / work from home flexibility. Hybrid work arrangements vary based on business area.

Sound like the kind of place you’d feel at home? We’d love to hear from you.

About the****position:

The IT Service Provider Governance Specialist is responsible for coordinating and executing Third Party and Intragroup Party Management (TIPM) activities on behalf of IT Service and Contract Owners, with a focus on Americas IT Infrastructure services. The function of this role is to ensure compliance with ING TIPM policy, risk control standards, and governance requirements including both pre-contracting due diligence and post-contracting oversight.

About the department:

The role operates within the First Line of Defense (1LoD) and helps ensure that service arrangements are properly defined and governed, controls are implemented and evidenced, and service review, continuous monitoring, remediation tracking, and reporting obligations are fulfilled to support secure service delivery, operational resilience, and regulatory compliance.

The role acts with and on behalf of IT Service / Contract Owners. Accountability remains with the Service Owners.

Responsibilities:

• TIPM Governance & Lifecycle Coordination: Execute governance activities and ensure arrangements are assessed, approved, registered and managed across the full lifecycle, including pre-contracting due diligence, in-life governance, and exit readiness.
• Control Execution & Compliance: Plan and execute TIPM control requirements including third-party cybersecurity and business continuity evaluations; coordinate risk assessments, support baseline and due diligence activities, and perform control monitoring. Gather and assess vendor risk control evidence.
• Service Review Management: Organize and facilitate regular Service Review Meetings (SRM) and Strategic Service Reviews (SSR) for critical and non-critical service arrangements.
• Third Party Assurance & Risk Oversight: Coordinate assurance report reviews, cyber and operational risk monitoring activities, and follow through on issue remediation and risk mitigation actions with relevant stakeholders.
• Contract & Lifecycle Support: Coordinate contracting activities, support pre-contracting due diligence, maintain in-life governance, and ensure operational and contractual considerations are addressed through transition and exit phases.
• Data Management & Reporting: Maintain TIPM registers, reporting, and audit evidence.
• Regulatory & Policy Alignment: Define and implement processes to ensure compliance with TIPM policy, TPCRM / ITRS requirements, FFIEC, NYDFS, DORA, and other relevant internal standards and regulatory expectations.

Key Stakeholder Engagement

• Coordinate and maintain close communication with stakeholders including IT Service Owners / Application Owners, Procurement (Global and Americas), Legal / Contracting, Operational Risk Management (ORM / NFR), CISO / IT Risk, Finance / Vendor Management, ODCR TIPM, and external third parties and intragroup providers.

Qualifications and Competencies

• Bachelor’s degree in IT, Risk Management, Finance, or related field
• 3+ years of relevant experience
• Experience in regulated banking environments preferred
• Related certifications preferred, e.g. Certified Third-Party Risk Professional (CTPRP)

Required Competencies

• Knowledge of TIPM, TPCRM, outsourcing, and third-party risk frameworks, including control standards, assessments, and supporting guidance
• Experience in IT governance, vendor management, or operational risk
• Ability to coordinate cross-functional stakeholders
• Strong attention to detail and audit readiness
• Risk awareness and structured problem-solving
• Understanding of secure service delivery, operational resilience, continuous monitoring, and remediation tracking in regulated environments

Sample Success Criteria

• Complete and accurate TIPM register
• Clear definition of Key Performance Indicators and Service Level Agreements for third-party and intracompany services
• Timely execution of Service Review Meetings, Strategic Service Reviews, Risk Control Self Assessments
• Reduction in control gaps and audit findings
• Audit-ready documentation and evidence
• Positive stakeholder feedback

Salary Range: $89,000-113,000

The salary range listed reflects base salary only. This role is eligible for participation in a discretionary bonus program.

In addition to comprehensive health benefits, a generous 401k savings plan, and competitive PTO, ING provides a broad array of benefits including adoption, surrogacy, and fertility services; student debt assistance; and subsidies for expenses associated with commuting and fitness.

ING is a committed equal opportunity employer. We welcome applicants of diverse backgrounds and hire without regard to race, gender, religion, national origin, citizenship, disability, age, sexual orientation, or any other characteristic protected by law. We celebrate these differences and rely upon your unique perspective to innovate and seize new opportunities. Come as you are.

ING Bank does not have a commercial banking license in the U.S. and therefore not permitted to conduct a commercial banking business in the U.S. Through its wholly owned subsidiary ING Financial Services LLC, and its affiliates, it offers a full array of wholesale products such as commercial lending and a full range of FM products and services.