Senior Risk Manager Third-Party & Outsourcing Risk

Details

Strengthen third-party risk management across ABN AMRO's organisation. The CRO IT & Cyber function provides second-line oversight of third-party and outsourcing risk, including IT risk, information security, cyber security, digital resilience and operational resilience risk.

Responsibilities

• Monitor and challenge the third-party and outsourcing risk profile of subsidiaries, client units and countries.
• Assess whether appropriate third-party and outsourcing risk governance, ownership, processes and controls are in place and operating effectively.
• Challenge the quality and completeness of risk assessments, management information, issue management and remediation.
• Assess the implementation and consistent application of group-wide third-party and outsourcing risk policies, standards and frameworks.
• Advise and challenge stakeholders on regulatory expectations, including DORA and the EBA Guidelines on Outsourcing Arrangements.
• Identify common themes, dependencies and emerging risks across subsidiaries, client units and countries, and translate these into clear risk opinions.
• Build effective relationships with local management, first-line functions and Risk Management while maintaining an independent second-line perspective.
• Consolidate insights and provide clear conclusions and recommendations to senior stakeholders.

Working Environment

The role is part of the CRO IT & Cyber function within Risk Management. ABN AMRO uses a three lines of defence model. The function provides second-line oversight of IT risk, information security, cyber security, outsourcing risk, digital resilience and operational resilience risk, offering independent challenge and guidance to the first line.

Requirements

• University-level degree.
• At least 10 years of relevant work experience.
• Experience in third-party risk, outsourcing risk, operational risk, IT risk or information security.
• Preferably a background in IT audit or financial audit.
• Experience in an international financial institution is preferred.
• Knowledge of DORA and the EBA Guidelines on Outsourcing Arrangements is preferred.
• Sound judgement and the ability to provide constructive challenge.
• Ability to assess risk at a broad organisational level while going into detail where necessary.
• Ability to distinguish material risks from noise across different business and regulatory environments.
• Clear communication and relationship-building skills across organisational boundaries.
• Ability to maintain an independent second-line perspective.
• Comfortable working in a developing area where frameworks, expectations and practices are still maturing.
• Fluent English; Dutch is an advantage.
• Based in the Netherlands.

Benefits

• Gross monthly salary based on a 36-hour work week, including holiday allowance and a flexible benefits budget.
• Hay grade 12 or 13, depending on experience.
• Excellent pension scheme.
• Flexible working, with working from home possible in consultation with the team and depending on the role.
• Ergonomic home office setup.
• Five weeks of vacation per year, plus two mandatory days off, with the option to purchase up to four additional weeks annually.
• Five additional “Banking for better days” for personal development or volunteer work.
• Personal development budget of €1,000 per year, which can accumulate up to €3,000.
• Annual public transport pass providing free public transportation throughout the Netherlands for business and private use.