ING on the Rise of the Next-Gen CISO

Debbie Janeczek from ING shared how the bank is redefining what cybersecurity leadership looks like in modern financial services. Having joined ING eight months ago, she highlighted the bank’s strong security culture — one where cyber resilience is taken seriously at every level, including direct involvement from the CEO in ING’s internal security forum.

Janeczek explained that the role of the CISO has undergone a major transformation. Traditionally, it was a highly technical function focused on tools, systems, and compliance. Over time, it evolved into a risk-executive model — one centred on understanding threats and building resilience across the organisation. But she believes the industry must now take the next step.

For her, the future is the “next-generation CISO organisation”: a cybersecurity function that doesn’t simply protect value but creates it. Instead of operating purely as a tech-driven cost centre, security leaders must become true business partners — embedded across business units, engaged in strategic decisions, and helping shape the direction of the company.

She emphasised that while technology, tools, and regulatory compliance remain essential, they are no longer enough. Cybersecurity must take a holistic view of the enterprise, extending beyond IT teams and into every core business function. The next-gen CISO must be operational, tactical, and strategic all at once — a leader who ensures the organisation is secure while enabling innovation, growth, and long-term resilience.

For ING and Janeczek, cybersecurity is no longer just about defending the perimeter. It’s about empowering the business, guiding decision-making, and ensuring the organisation is equipped to thrive in an increasingly complex digital world.