IT SOX Coordinator Amsterdam

IT SOX Coordinator

ING is looking for an IT SOX Coordinator

ING is a bank that is known for its IT innovations and has a primarily focus on Risk & Security.

ING CISO Domestic Bank NL (DBNL) is looking for a passionate and inspiring Non-Financial Risk manager, who will support the CISO department and the IT organization in the role of IT SOX Coordinator.

As an IT SOX Coordinator you ensure that ING Market Leader applications and processes for DBNL comply with the SOx requirements.

In the function of IT SOX Coordinator your main focus will be:

• Prepare, coordinate, document and execute SOx audit plans in co-operation with the external auditor.
• Inform and support international DevSecOps teams to adhere to SOx requirements.
• Cooperate with first- and second-line risk management including coaching of the first line testing team in Bratislava.
• Improving and updating existing process documentation based on knowledge and experience of previous SOx audits and updated control frameworks.
• Pro-active reporting of the progress and status of the SOx audit to stakeholders and informing stakeholders of any future changes.
• Evaluate control deficiencies, identify root causes and make sure that remediation plans are created and executed in a timely manner.
• Coordinate the preparation of SOx sign off documentation and follow up on deficiencies in the ING wide Risk ledger.
• Build strong relationship with internal and external stakeholders.

Your working Environment:

ING works in multi-disciplinary teams based on Scrum, Agile and DevOps principles. Responsibility for Infra and Security is adapted within the squads, business & IT have joined, making a squad end-to-end responsible for a customer journey or product. This is also called the ING adaptation of the ‘Spotify’ model. For more about our way of working please visit: https:

At DBNL both monthly and ongoing audits are performed on various IT Risk areas such as SOx compliancy and DNB/ECB or Internal Audit compliancy. DBNL’s target is to stay within a strict Risk appetite. To achieve this target, all evidence that is registered by the teams and squads needs to be monitored continuously on quality and conformity with respect to the stated quality criteria.

As IT SOX Coordinator you will liaise with all levels of defence in ING’s risk model ranging from engineers, management and CISO in the first line, Information Risk Officers and policy makers in the 2nd line to auditors in the 3rd line including the external auditor. You will maintain these relations to build a safe, secure and compliant bank with a detailed focus on IT General Controls regarding SOx. The SOx audit team currently consists of two IT SOx Specialists.

The type of person we are looking for:

• You have a passion for IT Security and understand the importance of SOx compliance.
• You are familiar with Agile and DevSecOps.
• You are an independent and result-oriented person.
• You do not have a 9 to 5 mentality, are stress resistant and you have a large organisational sensitivity.
• You have thorough understanding of IT Risk & Security principles preferably regarding Identity & Access Management, Change Management and/or Security Monitoring.

• You are capable of structuring, organising, and following up of different activities in a disciplined way.
• You are service oriented and have persuasive power.
• You have analytical skills and are strongminded.
• You have accounting/IT audit and/or management consulting experience.

The skillset you need to have:

• Stakeholder management skills
• People management and coaching skills
• Strong analytical skills and critical thinking
• Strong communicational skills
• Project management and reporting skills
• You have an excellent level of communicational skills, both verbal and written in Dutch and English.
• You are in the possession of a Bachelor or Master’s degree.
• CISM/CISA Certified or CISSP Certified and experience in the CISM domain.

What do we offer?

• 40-hour workweek
• Agile and dynamic work environment with focus on our customers
• The opportunity to make a difference for the operational developers and administrators within Retail NL by enabling them to manage and develop in a more efficient way due to an efficient design of the audit administration
• A diverse team with enthusiastic and specialistic employees
• Endless possibilities to develop your soft and hard skills
• The working location is Amsterdam.