Senior IT Risk Officer

This is Adyen

Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition.

For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster.

Senior IT Risk Officer

Tech Risk Officer

Adyen is both a technology company and a licensed bank. We combine the best of both worlds; the innovative strengths of technology with the stability of our financial licenses. We operate a single central technology setup and do this globally. This means you will also interact with second line colleagues(compliance, privacy) from different regions, and act as an SME for the implementation of technology and security regulatory requirements.

The Tech Risk team within the second line Enterprise Risk function ensures that risk management practices are applied across Adyen’s technological environments, teams and initiatives. The key risks it covers are those of Information Technology and Information Security (IS/IT). This continuous task requires a close relationship with technical teams in the first line, in order to understand changes in the tech landscape but also to guide them in relation to risk mitigations.

The ideal candidate is an experienced IT Risk professional, with relevant expertise in Tech Governance, Risk and Compliance activities. The candidate has a solid technical understanding, and can advance the IS & IT risk framework to the next level of maturity, providing expert guidance in areas such as IT Excellence (IT Capacity, Change Management, etc.) and Digital Operational Resilience.

What you will do

• Execute IT Risk Assessments across diverse IT areas, projects and assets, advising stakeholders and ensuring risk mitigation actions are implemented.
• Collaborate closely with leadership and build an internal network to ensure the domain remains represented in business activities, contributing to decision making.
• Drive the second line risk oversight for Technology risks, including KRI design, risk monitoring and reporting.
• Collaborate with other Enterprise Risk domains, in order to incorporate IT risks into Adyen’s risk profile, ensuring those are considered when evaluating company objectives.
• Collaborate with or advise other second-line teams (typically Regulatory, Compliance and Privacy) in the implementation of requirements in Adyen’s tech environments, as well as engage with local auditors or external partners (externally) as a trusted point of contact for the specific risk domains, globally.
• Engage with various regulators to provide clarity on Adyen’s IT Resilience and excellence landscape.

Who you are

• You have at least 5+ years experience with IT risk management, working with(in) the second line risk management or in technology risk consulting in a Big 4 firm or comparable.
• Demonstrated experience in IT risk evaluations, IT resilience best practices, Incident and Business continuity processes, as well as associate regulations such as DORA or recognized industry frameworks.
• You feel comfortable explaining risks associated with IT environments to engineers but also to business stakeholders.
• You have a solid understanding of commonly used technology stack (hardware, software, network and systems, on-prem or cloud environments), at the level required to identify risks or weaknesses and recommend tangible actions, design metrics to enable risk monitoring and oversight.
• You are innovative, flexible with strong problem-solving capabilities and able to define effective processes, when possible scaling manual processes via automation.

This role is based out of our Amsterdam office. We are an office-first company and value in-person collaboration; we do not offer remote-only roles.