Senior Cyber Security Risk Manager

Details

ABN AMRO is seeking a senior second-line cyber security risk expert to provide independent oversight of bank-wide cyber security maturity and actual risk exposure. The role involves implementing and monitoring risk instruments, analysing cyber exposure, challenging the status quo, and advising senior stakeholders across cyber security, IT, business, and risk functions.

Responsibilities

• Provide independent oversight of cyber security maturity and cyber exposure across the bank's IT and business landscape.
• Challenge and advise first-line teams on risk posture, controls, remediation, and action plans.
• Translate findings into concise reporting and clear recommendations for senior stakeholders.
• Perform independent assessments and deep dives into key security capabilities and important systems.
• Review and challenge remediation plans, control improvements, and risk acceptances.
• Identify recurring risk themes and translate them into practical improvement actions.
• Lead complex bank-wide risk assessments and shape the cyber-risk oversight agenda.
• Provide authoritative risk opinions to senior management and risk governance forums.
• Support improvements in cyber security risk oversight maturity.
• Collaborate with and support the wider Cyber Security Risk team.

Working Environment

The position is part of the CRO IT & Cyber function within the Risk Management department. This second-line function provides oversight of IT risk, information security, cyber security, digital resilience, and outsourcing risk within ABN AMRO's three-lines-of-defence model.

Requirements

• Strong understanding of cyber security governance and best practices across a broad range of topics.
• Understanding of cloud infrastructure, particularly Azure, and on-premises infrastructure typologies.
• Senior-level technology risk management experience, including oversight, control challenge, and senior stakeholder engagement.
• Ability to operate independently and deliver within fixed assignment timeframes.
• Strong analytical skills, sound judgement, and the ability to simplify complex issues.
• Team-oriented mindset and a hands-on approach focused on quality delivery.
• Knowledge of laws and regulations related to cyber security and risk management.
• Strong communication skills in Dutch and/or English.
• Understanding of Identity and Access Management design principles, architectures, and governance approaches is preferred.
• Understanding of AI in the context of cyber security attacks and defence is preferred.
• Familiarity with digital operational resilience, cyber resilience, IT control frameworks, or regulatory expectations is preferred.
• Experience in banking or another highly regulated environment is preferred.

Benefits

• Gross monthly salary of €8,192–€11,702, depending on experience and Hay grade 12/13, based on a 36-hour work week and including holiday allowance and a flexible benefit budget.
• Excellent pension scheme.
• Flexible working, including working from home in consultation with the team; an ergonomic home office setup is provided.
• Five weeks of vacation per year, two mandatory days off, and the option to purchase up to four additional weeks annually.
• Five additional days off for personal development or volunteer work.
• Annual development budget of €1,000, accumulating up to €3,000.
• Annual public transport pass with free public transportation throughout the Netherlands for business and private use.