IT Risk, Control & Data Analyst - CRO IT & Cyber

at ABN AMRO

📍 Amsterdam, Netherlands

EUR 63,600-90,900 per year

MIDDLE

✅ Hybrid

🕙 36-40 hours per week

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

Audit @ 5 Reporting @ 6 Security @ 3

Details

You help strengthen ABN AMRO’s IT and cyber risk management by turning data, controls and risk information into clear insights that support informed decisions. You maintain control records, monitor remediation actions, analyse trends and improve reporting quality. You work with colleagues across the bank to support a disciplined and data-driven approach to technology risk, cyber security and operational resilience.

Responsibilities

Maintain control inventories, testing schedules and supporting evidence.
Monitor issues, actions and deadlines, and follow up with stakeholders.
Support risk assessments by coordinating information requests and reviewing submissions.
Analyse first-line risk data and identify trends, exceptions and data quality concerns.
Prepare reports, dashboards and presentation materials for management discussions.
Work with risk specialists, business stakeholders and colleagues across technology, information security, cyber security, third-party risk, outsourcing, business continuity and physical security.
Support reliable reporting, consistent risk practices and strong governance.

Requirements

University degree, preferably in IT, Information Management or a related field.
At least 3 years of experience in IT risk, cyber risk, IT audit, controls or a related area.
Knowledge of IT risk management, information security or operational resilience.
Experience working with data, reporting and analysing trends or exceptions.
Strong skills in creating reports, dashboards and presentation materials.
Relevant certification, or active progress towards one, such as CISA, CRISC, CISSP or a comparable qualification.
Professional proficiency in English.
Careful and structured approach to complex information, with the ability to identify inconsistencies and communicate findings clearly.
Candidates must be based in the Netherlands.

Benefits

Permanent role in a newly created team focused on IT and cyber risk management.
Gross monthly salary based on a 36-hour work week, including holiday allowance and a flexible benefit budget.
Excellent pension scheme.
Hybrid flexibility, with working from home possible in consultation with the team and an ergonomic home office setup provided.
Five weeks of vacation per year, two mandatory days off and the option to purchase up to four additional weeks annually.
Five “Banking for better days” for personal development or volunteer work.
Development budget of €1,000 per year, which can accumulate up to €3,000.
Annual public transport pass providing free public transportation throughout the Netherlands for business and private use.