Key Skills

Job Description

At a glance Structure a complex topic and function into effective operations ABN AMRO works with the three lines of defence model. Within Risk Management, the CRO IT & Cyber function provides 2nd line oversight of IT risk, information security and cyber security, third-party and outsourcing risk, as well as business continuity and physical security risk. More and more these areas are converging into what we label digital and operational resilience. CRO IT & Cyber has specialized teams per risk type. But an overarching and facilitating Risk & Control team ensures an effective risk practice, an efficient team, with clear alignment to risk policies and quality output in risk reporting. Your job We are looking for an experienced risk manager who will become part of a small team to facilitate the CRO IT & Cyber function and to consolidate individual findings into overarching view points and opinions. You will also define, formalize and steer our ways of working and help the team to deliver output according to a clear and formalized process. You have a thorough understanding of IT and cybersecurity. This will enable you to digest the information coming from the teams into a wider picture. You also have a thorough understanding of risk management, which will enable you to structure and simplify our way-of-working. You have a can-do mentality and are quick on the ball, as we are faced continuously with deadlines and short-term deliveries. In more detail, depending on your profile and the work division in your team, you are expected to work on: Ensuring proper risk instruments for our function, for instance policy, standards, risk management processes, charters, which are aligned with enterprise risk management and introduced to our 1LoD counterparts; Maintain and monitor our annual agenda of work, ensure that quality-delivery is done on time. This will require a mix of internal work division and coordination, proactive individual contributions, and stakeholder engagement; Deliver planned and unplanned risk reporting, risk memo’s and other inputs for stakeholders like ExBo, SB, CU CRO’s; Enable, facilitate and monitor an effective practice of risk identification, risk monitoring, risk administration and risk closure; Enable, facilitate and monitor an effective practice for control design effectiveness and control operating effectiveness monitoring and testing. Drive our ambition to apply a more data-driven risk management approach by leveraging available dashboarding as well as by developing additional analytical capabilities where needed. Facilitate the MT CRO IT & Cyber with unplanned work items that require (quick) delivery. As one of our Risk & Control managers, you will play a key role in building and expanding our CRO IT & Cyber function. Working environment Your profile You are a risk professional with a strong interest in data, technology, resilience, outsourcing and innovation. You understand that technology provides opportunities, but also requires careful risk management. You are able to maintain a helicopter perspective on our way of working as well as on the content of the relevant risk types. You enjoy working towards delivery together with relevant colleagues. You take ownership and responsibility for that. You can challenge constructively, advise pragmatically and help stakeholders move forward. You are comfortable operating in a developing area where frameworks, expectations and practices are still maturing. We are offering We offer a permanent role in a newly created team with a clear strategic purpose. You will have the opportunity to contribute to an important area of risk management and help shape how our organisation manages technology, outsourcing and resilience risks. You will work on topics that are relevant, complex and visible. You will collaborate with colleagues across risk, technology, data, security and the business, and you will help build a practice that supports responsible innovation. This role offers: The opportunity to help develop a new function to a next maturity level. A role with direct relevance to the organisation’s strategy. Exposure to senior stakeholders and multidisciplinary decision-making. A chance to work at the intersection of risk, technology, data and business change. Room to develop expertise in a rapidly evolving field. Interested? Your Future: Inclusive, Innovative, Sustainable At ABN AMRO, we believe in "Banking for better, for generations to come." Equal opportunities for everyone are a crucial foundation, as we strive for an inclusive culture where all employees feel seen, heard, and valued. Our vision of being a personal bank in the digital age aligns perfectly with the demand for surprising insights and innovative solutions, born from a diverse interplay of cultures and experiences. We focus on customer experience, sustainability, and building a future-proof bank, conducting annual reviews to ensure equal pay for equal work. Join a bank that embraces ingenuity and ambition, and make an impact with us for a better future. If you want to apply for the B-Able or Reboot program, make sure to mention it both in the title and the content of your resume. Disclaimer external recruitment agencies External recruitment agencies need to have a signed agreement with ABN AMRO BANK N.V., executed by a Talent Acquisition Specialist, when submitting a resume to a vacancy. No unsolicited services or offers, please. Use of AI in our application process You’re welcome to use AI to help write your CV or cover letter, as long as it reflects your own story. We review every application personally and without AI. During interviews, real time AI tools may not be used. With your permission, interviews can be recorded and supported by AI. This helps us keep the process fair, careful, and transparent.

Core Responsibilities

Develop and coordinate risk policies, standards, processes, reporting, and control practices for the CRO IT & Cyber function, ensuring timely, high-quality delivery and alignment with enterprise risk management. Consolidate risk findings into overarching assessments, support senior stakeholders, and advance data-driven risk management and the function’s ways of working.

Requirements

The role calls for an experienced risk professional with thorough knowledge of IT and cybersecurity, risk management, and relevant technology and resilience risks. The candidate should be able to maintain a broad perspective, take ownership, deliver under tight deadlines, work collaboratively, challenge constructively, and operate effectively in a developing environment.

Benefits

• Permanent Employment
• Professional Development Opportunities
• Exposure to Senior Stakeholders
• Opportunity to Help Build a New Function