Cyber Security Risk Specialist

Details

ABN AMRO is seeking a Cyber Security Risk Specialist to join the Cyber Security Risk team within the CRO IT & Cyber function. The role brings hands-on technical security experience into an independent second-line risk position, covering security architectures, controls, vulnerabilities, attack paths, governance and enterprise cyber risk.

Responsibilities

• Perform independent technical deep dives into security architectures, controls, vulnerabilities and attack scenarios.
• Challenge security specialists and engineering teams on threat models, control design, implementation quality and residual risk.
• Review penetration-test findings, security assessments, remediation plans and risk acceptances, and assess whether conclusions are technically sound.
• Assess the security of critical systems across cloud, on-premises, identity, application and infrastructure environments.
• Connect technical weaknesses to plausible attack paths, business impact and the bank’s wider cyber risk posture.
• Translate detailed findings into clear, evidence-based recommendations for non-technical and senior stakeholders.
• Identify recurring technical risk themes and help improve assessment methods, control expectations and oversight practices.
• Share knowledge with colleagues and contribute to the technical capability of the wider team.

The role is part of the CRO IT & Cyber function, which provides second-line oversight of IT risk, information security, cyber security, digital resilience and outsourcing risk within the three lines of defence model.

Requirements

• Several years of hands-on experience in penetration testing, security engineering, red teaming, application security, cloud security or a comparable technical security role.
• Ability to analyse technical designs and implementations in depth and challenge experienced specialists on substance.
• Understanding of common attack techniques, security controls and weaknesses across modern IT environments.
• Experience analysing technical findings, assessing exploitability and impact, and prioritising remediation.
• Curiosity, sound judgement and the confidence to ask probing questions while remaining constructive.
• Ability to explain technical risks clearly to non-technical stakeholders.
• Strong communication skills in Dutch and/or English.

Preferred experience includes Azure, identity security, Active Directory, APIs, containers, networks, secure software development, relevant technical certifications, cyber risk management, governance, regulatory expectations, banking or other highly regulated environments.

Benefits

• Gross monthly salary of €6,066 to €8,666 based on a 36-hour work week, including holiday allowance and a flexible benefit budget.
• Hay grade 10 or 11, depending on experience.
• Pension scheme.
• Flexible working, including working from home in consultation with the team and an ergonomic home office setup.
• Five weeks of vacation, two mandatory days off and the option to purchase up to four additional weeks annually.
• Five additional “Banking for better days” days off.
• Annual development budget of €1,000, accumulable up to €3,000.
• Annual public transport pass providing free public transportation throughout the Netherlands for business and private use.