Risk Manager Third-Party & Outsourcing Risk

at ABN AMRO

📍 Amsterdam, Netherlands

EUR 84,600-120,800 per year

SENIOR

✅ Hybrid

🕙 36-40 hours per week

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

Audit @ 4 Communication @ 7 Compliance Security @ 4

Details

ABN AMRO is seeking an experienced risk professional to provide second-line oversight and challenge for third-party and outsourcing risk within the CRO IT & Cyber function. The role focuses on assessing external providers, outsourced services, governance, controls, operational resilience, and compliance with DORA and outsourcing requirements.

Responsibilities

Review and challenge third-party risk assessments, control frameworks, and mitigation plans.
Prepare and perform risk assessments at vendor locations, both virtually and on site.
Interview vendor representatives and assess documentation, evidence, and operational practices.
Evaluate the design and operating effectiveness of controls.
Report findings to contract owners and managers.
Assess outsourcing arrangements and risks involving critical and important suppliers.
Advise stakeholders on DORA and outsourcing requirements.
Identify trends and translate complex information into clear risk opinions and management reporting.
Provide independent second-line challenge and guidance to the first line across IT risk, information security, cyber security, outsourcing risk, digital resilience, and operational resilience.

Requirements

University-level degree.
At least 10 years of relevant work experience.
Preferably a background in IT audit or financial audit, complemented by experience in third-party risk, outsourcing risk, operational risk, IT risk, or information security.
Understanding of risk assessments, control design, and operating effectiveness.
Experience in financial services, vendor assessments, cloud outsourcing, and DORA or the EBA Guidelines on Outsourcing Arrangements is preferred.
Strong judgement, communication, interviewing, and analytical skills.
Ability to assess how controls operate in practice and substantiate conclusions with evidence.
Fluent English; Dutch is an advantage.
Based in the Netherlands.

Working Environment

The role is part of the CRO IT & Cyber function within Risk Management. ABN AMRO operates according to the three lines of defence model. The newly created team provides independent challenge and guidance to the first line, focusing on material risks and emerging threats.

Benefits

Gross monthly salary based on a 36-hour work week, including holiday allowance and a flexible benefit budget.
Hay grade 11 or 12, depending on experience.
Pension scheme.
Flexible working, including working from home in consultation with the team and an ergonomic home office setup.
Five weeks of vacation per year, two mandatory days off, and the option to purchase up to four additional weeks annually.
Five additional “Banking for better days” for personal development or volunteer work.
Development budget of €1,000 per year, accumulating up to €3,000.
Annual public transport pass with free public transportation throughout the Netherlands for business and private use.