Senior IT Risk Manager

Details

International Card Services (ICS), a wholly owned subsidiary of ABN AMRO Bank N.V., is a payment service provider and market leader in issuing credit cards in the Netherlands. As Senior IT Risk Manager, you will provide independent second-line oversight, challenge and advice on technology-related risks across the organisation. You will report directly to the Head of IT Risk.

Responsibilities

• Contribute to the development, maintenance and continuous improvement of the IT Risk Management framework, policies, standards and methodologies in alignment with regulatory requirements and industry best practices.
• Oversee and challenge the quality of IT risk assessments, control assessments, vulnerability management outcomes and remediation plans, ensuring appropriate risk ownership, mitigation and follow-up.
• Provide second-line risk opinions, challenge and recommendations on IT, cybersecurity, operational resilience, outsourcing and data-related risks to senior management and relevant committees.
• Provide independent second-line oversight and challenge for major transformation, outsourcing and technology change initiatives.
• Prepare and present risk reports, trend analyses, key risk indicators and management insights on the organisation's technology risk posture.
• Build relationships with senior stakeholders across IT, business, compliance, security and group risk functions while maintaining an independent second-line perspective.
• Monitor emerging technology, cybersecurity and regulatory developments and translate them into relevant risk insights and improvements to the IT Risk framework.
• Drive continuous improvement of IT Risk Management processes, reporting, governance and ways of working.
• Cooperate with IT Risk colleagues at group level to ensure alignment, consistency and knowledge sharing.

Requirements

• Significant experience in IT and cybersecurity risk management and third-party risk management.
• A master's degree in Information Security, Computer Science or a related field, or equivalent professional experience.
• Ideally around 10 years of experience in information risk management or EDP audit, preferably in banking, financial services or consulting.
• Professional certifications such as RE, CISSP, CISA or CRISC.
• Experience interpreting external regulations relating to information security, technology risk and data management.
• Strong knowledge of cybersecurity frameworks and regulations, including DORA, GDPR, PSD2, PCI-DSS and ISO 27001.
• Ability to analyse complex information security issues, develop actionable plans and drive results.
• Experience enhancing IT Risk awareness and providing training in IT Risk Management.
• Excellent communication and collaboration skills, including the ability to engage senior stakeholders across teams and departments.

Benefits

• Gross monthly salary of €7,048 to €10,068 based on a 36-hour work week, including holiday allowance and a flexible benefit budget.
• Excellent pension scheme.
• Hybrid working, with working from home possible in consultation with the team and depending on the role, including an ergonomic home-office setup.
• Five weeks of vacation per year, two mandatory days off and the option to purchase up to four additional weeks annually.
• Five additional days off for personal development or volunteer work.
• Annual development budget of €1,000, which can accumulate up to €3,000.
• Annual public transport pass providing free public transportation throughout the Netherlands for business and private use.