Cyber Security Risk Consultant - CRO IT & Cyber

Details

As a Cyber Security Risk Consultant, you will help senior stakeholders understand complex cyber risks and make well-informed decisions. You will combine analytical rigour with strong communication, storylining and presentation skills, with the opportunity to build subject-matter depth in areas such as Identity and Access Management.

Responsibilities

• Structure cyber risk questions and develop fact-based storylines for decision-making.
• Prepare concise, high-quality presentations, briefings and risk opinions for senior stakeholders and governance forums.
• Support independent assessments and thematic deep dives, potentially focusing on Identity and Access Management or another cyber security domain.
• Challenge and advise first-line teams on risk posture, controls, remediation plans and risk acceptances.
• Connect insights across teams and create consistent messaging on cyber risk, priorities and progress.
• Analyse qualitative and quantitative information, identify recurring themes and translate them into practical improvement actions.
• Build trusted relationships while maintaining an independent and constructive second-line perspective.
• Contribute to team-wide methods, templates and ways of working.

Working Environment

You will join the Cyber Security Risk team within the CRO IT & Cyber function. Within Risk Management, the function provides second-line oversight of IT risk, information security, cyber security, digital resilience and outsourcing risk. It provides independent challenge and guidance to the first line, focusing on material risks and emerging threats within ABN AMRO's three lines of defence model.

Requirements

• Several years of relevant experience in cyber security, technology risk, consultancy, audit or a comparable analytical environment.
• Strong communication and stakeholder-management skills, with the ability to adapt messages to technical and senior audiences.
• Excellent storylining, visualisation and writing skills.
• Strong analytical skills and the ability to structure complex or ambiguous problems.
• Working knowledge of cyber security governance, controls and risk-management principles.
• A collaborative, hands-on mindset and the ability to deliver high-quality work within agreed timelines.
• Strong communication skills in Dutch and/or English.

Preferred Qualifications

• Experience in strategy, management or cyber security consulting.
• Knowledge of Identity and Access Management or another cyber security domain.
• Familiarity with cloud security, digital operational resilience, regulatory expectations or IT control frameworks.
• Experience in banking or another highly regulated environment.

Benefits

• Gross monthly salary of €6,066 to €8,666, depending on experience and Hay grade, based on a 36-hour work week and including holiday allowance and a flexible benefit budget.
• Excellent pension scheme.
• Flexible home working in consultation with the team, depending on the role, including an ergonomic home office setup.
• Five weeks of vacation per year, plus two mandatory days off, with the option to purchase up to four additional weeks annually.
• Five additional “Banking for better days” for personal development or volunteer work.
• Development budget of €1,000 per year, which can accumulate up to €3,000.
• Annual public transport pass providing free public transportation throughout the Netherlands for business and private use.