Non-Financial Risk Specialist

Job description

ING seeks a talented and enthusiastic Non-Financial Risk (NFR) Specialist for its Spain team. Reporting to the Head of NFR, you will help ING transform its processes, controls, and infrastructure into a digital bank with end-to-end straight-through processing. NFR management ensures operational risk remains within the bank’s risk appetite and maintains an acceptable control environment using a risk-based, proportionate approach. The team oversees global NFR policies and best-practice implementation in ING Spain, advises and challenges risk/control owners, monitors adherence to risk appetite, and produces quarterly NFR dashboard reports. Areas include control risk, processing risk, unauthorized activities, employment practices, personal and physical security, IT risk, continuity and operational resilience, and internal and external fraud.

Responsibilities

• Act as a trusted NFR advisor to IT and business management.
• Support, challenge, and monitor NFR processes and quality.
• Participate in and challenge risk assessments for strategic projects and programs.
• Help business and IT management identify issues, assess risk ratings, define actions, and follow through until resolution.
• Develop, maintain, and roll out NFR frameworks, policies, minimum standards, and procedures.
• Perform quality-assurance or deep-dive reviews as part of second-line monitoring.
• Identify internal/external developments, initiatives, and threats and translate them proactively into risk strategy.
• Monitor control design and effectiveness.
• Coordinate responses to legal/regulatory changes and ECB reports and monitor resolution of regulatory issues.
• Research and assess the organization’s risk profile, report to senior management, and support the Head of NFR.
• Raise risk-management awareness; develop training modules and train IT and business teams.

Personal information and purpose: The following personal information will be processed and used for recruitment: name, email address, telephone number, location, experience and education information, attachments voluntarily submitted by applicants such as CVs, identification number, position, department, planned start date, employment contract duration, work location, monthly salary, annual salary, variable bonus percentage, meal allowance, and vehicle allowance. Bosch will keep your data confidential worldwide in accordance with applicable data protection laws. During the recruitment process, your personal information will be provided to third parties outside Bosch (such as agencies) only when necessary. Bosch carefully selects these third parties and signs confidentiality agreements with them. Bosch takes various measures to protect your data from manipulation, loss, destruction, unauthorized access, or disclosure. Our security measures are continuously upgraded as new technologies are applied. Data transmitted between your local browser and our recruitment system is encrypted via HTTPS.

Applications for specific positions: Applying for a position at the Bosch Group means providing your personal information to the relevant legal entity within the Bosch Group (see the list of Bosch Group legal entities). If any documents or information change, please update them in all applications. HR staff may contact you to ask whether you consent to transferring your application to another suitable position within the Bosch Group. If you applied for a specific position, Bosch will transfer your application to another position only with your consent. You may withdraw your application at any time. Bosch will delete your personal information in accordance with applicable law. All materials related to your application will be retained for 24 months.

Your rights: If you wish to stop providing personal information to Bosch, contact us or submit a request through the BKMS system listed in the Bosch Online Recruitment Data Privacy Statement. You can view and edit your CV on the SmartRecruiters platform. You have the right to know about and decide how your personal information is processed, and to restrict or object to its processing. You may also correct or supplement your personal information.

Cross-border transfers: To achieve the purposes described above, the personal information collected may be transferred across countries or regions, for example Germany and Singapore. Germany: Robert Bosch GmbH, Robert-Bosch-Platz 1, Gerlingen-Schillerhöhe, Germany, 70839, for centralized recruitment management across the Group (Bosch China and the recipient both transfer data abroad for this purpose). United Kingdom: SmartRecruiters, St Stephen's House, Arthur Road, Windsor, Berkshire, SL4 1RU, for recruitment, subsequent communications, sharing job/event information, and invitations to a potential talent community. You may exercise your rights regarding processing with the overseas recipients using the contact details above.

Storage: We retain your personal information only for as long as necessary for the purposes described and for the period required by applicable laws and regulations.

Employment: If hired, your data will be transferred from the current recruitment system to the HR management system of the company for which you will work.

Contact details: Visit the official Bosch China website, Bosch in China > Join Bosch > Career Opportunities, and see section “9. Contact details” in the Online Recruitment Data Privacy Statement.

List of Bosch Group legal entities: Visit the official Bosch China website, Bosch in China > Join Bosch > Career Opportunities, and consult the list of Bosch Group legal entities currently using the online recruitment system in the Online Recruitment Data Privacy Statement (page 5).