Risk Control Specialist in IT

Embark on a transformative journey with our team, where your expertise as a Risk Control Specialist in IT (1st line) is crucial in our IT risk & control frameworks. In this pivotal role, you're not just a subject matter expert; you're a consultant, an advisor, and a team player, crafting and leading the activities that redefine how we manage IT risk and control.

You and your job

Picture yourself in a role where your day-to-day contributions directly shape Rabobank’s first line IT risk management, working hand in hand with a team of driven professionals for whom collaboration is key to success.

You are part of a Change & In Control (C&IC) team who are the centre of expertise of IT risk and controls and are the trusted 1LoR advisor and 2LoR liaison, fostering standardization, quality standards and knowledge transfer. C&IC is not primarily concerned with Audit, but works closely together with the Special Frameworks team who take care of that element.

In order to achieve our strategic ambitions we are looking to expand the team with one IT Risk Control Specialist.

Practical Examples

• Risk Control Framework translation between 2LoR and 1LoR IT and provide guidance for 1LoR teams.
• Coordination of Risk and Control activities in the IT domain including training of 1LoR IT.
• Provide expertise for resolving many ad hoc and sometimes urgent topics on the senior-and / or executive management level.
• Set up and maintain structured, coherent and increasingly automated methodology for answering questionnaires (such as ITRQ from ECB) or ad hoc queries (from Audit Committee or Regulators).

Key responsibilities

• Act as a consultant and advisor within the first line risk team, providing expert guidance on risk management and control activities.
• Utilize your extensive knowledge of risk management and IT to advise on improving risk and control processes and ensuring compliance.
• Engage with stakeholders across various levels of the organization, translating their input into actionable guidelines and requirements.
• Take initiative in identifying and addressing IT risk-related issues, working autonomously to drive improvements and efficiencies.

Within Rabobank's CITO (Chief Innovation & Technology Office), you'll join the CITO Control Office, a team of approximately 30 professionals dedicated to IT risk and control management. The team strengthens, simplifies, and safeguards the control environment for innovation and technology and acts as a central hub, connecting various IT divisions and ensuring the alignment of IT activities with overarching risk and compliance policies.

The CITO Control Office is the crucial link between IT, the business, and external stakeholders, including regulators like the ECB. This involves not only monitoring and reporting but also proactive risk management and guiding the organization through regulatory compliance. We foster a collaborative and supportive environment, characterized by open communication and a shared commitment to excellence. Our team values both professional expertise and a friendly, approachable work atmosphere.

Together we achieve more than alone

We believe in the power of difference and are curious about what you can bring to our team at CITO Control Office.

The people at CITO Control Office support the domain in establishing a risk governance structure that ensures senior management can steer on the right priorities to keep a healthy risk profile and be in control. Working together is the way we work; as 1 results-driven team at Rabobank.

Work on yourself & the world around you

At Rabobank, your development and that of society go hand in hand. That’s why we invest in you and work together for a better world.

You will benefit from a personal development budget, a hybrid working environment, and a good work-life balance. You will contribute to banking for both private and business customers, as well as to societal issues such as food and energy transitions.

You and your talent

• At minimum 5 years in an IT Risk Management function, continuously seeking and implementing improvements with a proven track record in risk and control within technology-driven environments.
• Ability to anticipate future risk challenges, and identify opportunities for improving risk and control processes and overall risk profile.
• Skilled in engaging with stakeholders and translating their input into effective risk management approach and guidance.
• Driven and pragmatic, with the ability to quickly understand various processes and translate knowledge into action.
• Familiarity with risk management frameworks like COBIT, ISO 27000, and Assurance reports (such as ISAE 3402 and AICPA SOC reports).
• Strong understanding of complex organizational dynamics and the ability to influence effectively.
• Proficient in conveying risk management processes through training sessions and maintaining clear instructions and templates.
• CRISC or CISM certifications are a plus.

🚨 To be considered for this position, you must be located in the Netherlands or elsewhere in the EU and have the legal right to work in the Netherlands. We are unable to consider candidates requiring relocation from another country.