IT Risk & Control Officer - CRO IT & Cyber

Details

ABN AMRO is looking for an experienced risk manager to join the CRO IT & Cyber Risk & Control team. The team provides second-line oversight of IT risk, information security and cybersecurity, third-party and outsourcing risk, business continuity, and physical security risk. These areas increasingly converge into digital and operational resilience.

The Risk & Control team facilitates the CRO IT & Cyber function, consolidates individual findings into overarching viewpoints and opinions, and establishes clear processes for effective risk management and reporting.

Responsibilities

• Ensure appropriate risk instruments for the function, including policies, standards, risk management processes, and charters aligned with enterprise risk management, and introduce them to first-line counterparts.
• Maintain and monitor the annual work agenda and ensure high-quality delivery on time through internal work division, proactive contributions, coordination, and stakeholder engagement.
• Deliver planned and unplanned risk reporting, risk memos, and other inputs for stakeholders such as the Executive Board, Supervisory Board, and Chief Risk Officers of business units.
• Enable, facilitate, and monitor effective practices for risk identification, monitoring, administration, and closure.
• Enable, facilitate, and monitor effective practices for control design effectiveness and control operating effectiveness monitoring and testing.
• Drive a more data-driven risk management approach by leveraging available dashboards and developing additional analytical capabilities where needed.
• Facilitate the CRO IT & Cyber Management Team with unplanned work items requiring quick delivery.
• Help build and expand the CRO IT & Cyber function and develop its ways of working.

Requirements

• Experience as a risk professional or risk manager.
• Thorough understanding of IT and cybersecurity.
• Thorough understanding of risk management.
• Strong interest in data, technology, resilience, outsourcing, and innovation.
• Ability to maintain a broad perspective on ways of working and relevant risk types.
• Ability to structure and simplify risk management processes and digest information into an overarching view.
• Ability to challenge constructively, advise pragmatically, and help stakeholders move forward.
• Ownership, responsibility, a can-do mentality, and the ability to work effectively toward deadlines and short-term deliveries.
• Comfortable working in a developing area where frameworks, expectations, and practices are still maturing.

Benefits

• Permanent role in a newly created team with a clear strategic purpose.
• Opportunity to help develop a new function to the next maturity level.
• Direct relevance to the organisation's strategy.
• Exposure to senior stakeholders and multidisciplinary decision-making.
• Opportunity to work at the intersection of risk, technology, data, and business change.
• Room to develop expertise in a rapidly evolving field.
• Collaboration with colleagues across risk, technology, data, security, and the business.