Data Protection Compliance Specialist @ING Hubs Romania

About this role

Discover ING Hubs Romania

ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of 𝐨𝐯𝐞𝐫 𝟐𝟎𝟎𝟎 𝐡𝐢𝐠𝐡-𝐩𝐞𝐫𝐟𝐨𝐫𝐦𝐢𝐧𝐠 𝐞𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐬, 𝐫𝐢𝐬𝐤, 𝐚𝐧𝐝 𝐨𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬 𝐩𝐫𝐨𝐟𝐞𝐬𝐬𝐢𝐨𝐧𝐚𝐥𝐬.

We started out in 2015 as ING’s software development hub, then steadily expanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities and 𝐨𝐩𝐞𝐫𝐚𝐭𝐞 𝐟𝐫𝐨𝐦 Bucharest.

𝐎𝐮𝐫 𝐭𝐞𝐜𝐡 𝐜𝐚𝐩𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬 𝐫𝐞𝐦𝐚𝐢𝐧 𝐭𝐡𝐞 𝐜𝐨𝐫𝐞 𝐨𝐟 𝐨𝐮𝐫 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬, with more than 1800 colleagues active in Data Management, Touchpoint Channels & Integration, Core Banking, and Global Products.

We enjoy a flexible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.

For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things and they love doing it in good company. Do you?

The Mission

You will work within the vertical Group Data Protection Compliance, a department within Compliance that is in place starting March 2023. Data Protection Compliance is an important risk area with growing interest from both internal and external stakeholders.

As a Global Data Protection Compliance Specialist, you are (or can become) an expert on the area of Data Protection Risk Management, as this is a key compliance risk that the bank needs to manage. You have freedom to organize your work according to your own expertise and insights within team setting.

You will be member of the Global Data Protection Risk Management team that is responsible for global oversight of the Global Data Protection Policy (GDPR) and Global Record Retention and Deletion Policy (GRRD) risk and owns risk management direction for the organization to operate within risk appetite.

Although this is a virtual team, occasional travelling to Amsterdam is part of the function.

The Global Data Protection Compliance Risk Management team forms with the Data Protection Compliance Policy & Advisory team the vertical Data Protection Compliance.

Your day to day

• You execute activities for one of more specific processes, business areas and/or projects of the compliance risk management cycle for data protection risk (e.g: CRAS; RAC);
• Depending on your ambition and expertise you will be focusing on the data protection risk management framework, monitoring, and reporting or bank-wide risks, global processing risks and emerging risks.
• The topics can be related to: (i) involvement in analyzing, reviewing, or challenging the consolidated data of Operational Compliance Dashboard, Compliance Cockpit data for establishing exposure for Data Protection Compliance Risk, (ii) offering support and input for NFRD/CRU reporting (Compliance Risk Update), (iii) monitor data quality on Data Protection Compliance related risks, issues and events in iRisk; (iv) be a point of contact for ING locations, executing roles and responsibilities part of the Functional Oversight mandate; (v) as well as contribution to design and execution of monitoring methods and activities for data protection risks and specific risk analysis on data protection risks. Other topics can be related to challenge and advise activities on bank wide risks, such as storage limitation, third party data processors and cookie compliance but also formulating 2nd line responses on new and emerging risks.
• You can be part of a task group or project team and contribute to the execution of deliverables;
• You will report on the above tasks and projects;
• You contribute to quality of and knowledge on Data Protection Compliance risk management, monitoring and reporting;
• You participate in (multi) disciplinary (project) compliance risk teams and contribute to ensure alignment with NFR, IT risk and data risk.

What you’ll bring to the team

• You have in depth knowledge on GDPR and data protection risk and issues;
• You have 3+ years professional experience in audit, compliance or risk management;
• You have excellent collaboration skills and ability to work across functional and geographic lines;
• You have a university degree or equivalent;
• You have an excellent level of English (verbal/written).

If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on our website (make sure to scroll until you reach the Data Protection section/ Candidates tab).