Exposure Management Analyst

Details

The Security Assurance team within ABN AMRO's Corporate Information Security Office is looking for an Exposure Management Analyst to help evolve vulnerability management into a broader exposure-focused and Continuous Threat Exposure Management (CTEM) approach. You will analyse security findings across the technology landscape and provide a clear view of cyber exposure by combining technical findings with asset and business context, threat information, attack paths, existing controls, and validation results.

Responsibilities

• Analyse vulnerabilities, misconfigurations, and other security weaknesses to identify meaningful exposures.
• Combine findings with asset criticality, reachability, exploitability, threat activity, and existing security controls.
• Prioritise exposures based on actual risk rather than relying primarily on CVSS or severity.
• Work with technical teams to understand exposures and drive remediation or mitigation.
• Use validation and adversarial testing results to determine whether suspected exposures can be exploited.
• Identify gaps in visibility, data, and analysis capabilities.
• Help automate exposure analysis and prioritisation where possible.
• Contribute to the further development and implementation of the Exposure Management and CTEM approach.
• Stay current with new technologies and trends, take ownership, challenge assumptions, and drive initiatives from idea to implementation.

Working Environment

You will work in an informal and supportive Security Assurance team in the Netherlands. ABN AMRO uses an agile way of working that values speed, collaboration, innovation, and continuous improvement. The role involves working with Product Owners, engineers, security specialists, and stakeholders across different disciplines and departments.

Requirements

• Strong interest in Exposure Management, Continuous Threat Exposure Management (CTEM), and innovation in cybersecurity.
• Interest in AI-driven security practices and emerging technologies.
• Ability to analyse vulnerabilities, misconfigurations, attack paths, threat information, and security controls.
• Proactive and collaborative mindset with a strong sense of ownership.
• Ability to build effective working relationships and contribute to shared goals.
• Willingness to learn and help mature the organisation from traditional vulnerability management to CTEM.

Benefits

• Gross monthly salary of €6,066 to €8,666 based on a 36-hour work week, including holiday allowance and a flexible benefits budget.
• Excellent pension scheme.
• Flexible working, including working from home in consultation with the team; an ergonomic home-office setup is provided.
• Five weeks of vacation per year, plus two mandatory days off, with the option to purchase up to four additional weeks.
• Five additional “Banking for better days” for personal development or volunteer work.
• Annual development budget of €1,000, accumulating up to €3,000.
• Annual public transport pass for free business and private travel throughout the Netherlands.