Supplier Contract Risk Manager IT

Details

Managing Third Party Risk and Supply Chain Risk is becoming increasingly important due to growing cyber threats and regulatory expectations. ABN AMRO is strengthening and centralising its approach through the Supplier Contract Risk Management department within the Corporate Information Security Office, launched in April 2025. The role contributes to the bank's digital resilience by ensuring supplier contracts meet high standards of risk management and compliance.

Responsibilities

• Advise and support business units and Procurement in selecting, contracting, and managing suppliers, ensuring Third Party Risk Management (TPRM) processes and best practices are consistently applied.
• Identify, assess, monitor, and mitigate supplier and contract risks throughout the full contract lifecycle.
• Maintain oversight of the supplier portfolio and associated risk profiles, proactively identifying risks, bottlenecks, and improvement opportunities.
• Analyse aggregation and concentration risks and translate the results into clear stakeholder insights.
• Coordinate risk governance by communicating, escalating, and following up on supplier risks with Contract Owners, Procurement, Security, Risk, and Audit.
• Ensure risk controls are implemented and monitored effectively, with required evidence available for audits and regulatory reviews.
• Improve TPRM processes, tools, and reporting to strengthen risk management capabilities and digital resilience.
• Raise awareness of supplier risk management practices and support stakeholders.
• Coordinate the implementation of relevant regulatory changes, including DORA and Third Party Risk Management requirements.
• Depending on experience and seniority, provide training, mentoring, and coaching to junior colleagues.

The role covers critical hybrid IT services in the Platform & Technologies domain, with a focus on operational resilience, cybersecurity, supply chain security, and data privacy. The position involves collaboration with stakeholders across Technology, Cyber Security, Procurement, Legal, Compliance, Finance, and Risk.

Requirements

• 2–5 years of relevant experience in risk management and/or contract management.
• Understanding of risk as an integral part of decision-making.
• Experience in one or more specialised risk domains, such as information security, data privacy, business continuity, financial or credit risk, or Third Party Risk Management, including DORA.
• Experience in or knowledge of the banking and financial sector, including IT-related environments.
• Strong analytical capabilities and a structured, results-driven approach.
• Ability to work independently and manage stakeholders across business, procurement, and risk functions.
• Ability to translate regulatory requirements into practical processes and controls.
• Familiarity with contract management methodologies is preferred, such as CATS CM.
• A process-oriented approach and analytical skills.

Benefits

• Gross monthly salary of €5,304–€7,577 based on the Hay 10 scale and a 36-hour work week, including holiday allowance and benefit budget. The salary level is determined by skills and experience within the Hay 9 or Hay 10 scale.
• Benefit budget of 11% of salary.
• Five weeks of annual vacation, with the option to purchase four additional weeks.
• Personal Development Budget of €1,000 per year, accumulable up to €3,000.
• Possibility to work from home in consultation with the team and depending on the role.
• Public transport annual pass with free travel throughout the Netherlands.
• Pension scheme.