Senior IT Risk, Control & Data Manager - CRO IT & Cyber

Details

Help shape a credible, data-driven risk management function at ABN AMRO. In this senior role, you connect technology risk, cyber security, regulatory requirements and management information into one clear picture. You strengthen decision-making, support regulatory compliance and improve digital resilience across the bank. Your work influences senior stakeholders and helps ensure that critical services remain secure, stable and resilient in a rapidly changing environment.

Responsibilities

• Design and improve risk governance, standards and working practices.
• Lead regulatory risk assessments and review first-line evidence.
• Analyse risk and control data to identify trends and challenge outcomes.
• Create concise reports, board papers and presentation materials.
• Advise senior stakeholders across the first line and Risk Management.
• Professionalise risk management within CRO IT & Cyber by bringing structure to complex topics, translating regulations into practical requirements and creating clear insights for decision-makers.
• Support a resilient digital organisation through strategic thinking and hands-on execution.

Working Environment

You will join the Risk, Control & Data team within CRO IT & Cyber, part of ABN AMRO's second line of defence. The team focuses on consistent risk practices, reliable reporting, strong governance and effective oversight across technology and cyber-related risk domains.

You will work closely with specialists in IT risk, cyber security, operational resilience, outsourcing risk and information security. You will interact regularly with senior stakeholders, challenge constructively and contribute to a function that continues to mature and evolve. For this role, you are based in the Netherlands.

Requirements

• A university degree, preferably in IT, Information Management or a related field.
• At least 10 years of experience in IT risk, cyber risk, IT audit or a related discipline.
• Experience interpreting and applying regulatory requirements such as DORA, the Cyber Resilience Act, Wwke and EBA outsourcing guidelines.
• Knowledge of IT risk management, cyber security, governance and controls.
• Experience reviewing control frameworks, risk assessments and remediation activities.
• Professional certifications in IT risk, cyber security or audit, such as CISA, CRISC, CISSP, CISM or equivalent.
• Strong English communication skills, both written and spoken.
• Sound judgement, a practical mindset and the ability to translate technical and regulatory subjects into clear actions.
• Strong communication and relationship-building skills, with the ability to ask critical questions and maintain attention to detail and evidence.

Benefits

• Permanent role in a newly created team with a clear strategic purpose.
• Gross monthly salary based on a 36-hour work week, including holiday allowance and a flexible benefit budget.
• Excellent pension scheme.
• Flexible working, with working from home possible in consultation with the team and depending on the role.
• Ergonomic home office setup.
• Five weeks of vacation per year, supplemented by two mandatory days off, with the option to purchase up to four additional weeks annually.
• Five additional “Banking for better days” days off for personal development or volunteer work.
• Development budget of €1,000 per year, which can accumulate up to €3,000.
• Annual public transport pass with free public transportation throughout the Netherlands for business and private use.
• The Hay grade will depend on experience and will be grade 11 or 12.