Senior Tech & Data Risk Manager

Will you join this team?

As a Senior Tech & Data Risk Manager, you make sure customers can trust the platform without hesitation. You help ensure that millions of customers and thousands of partners can rely on a secure, resilient, and compliant platform. At bol, technology is at the core: a retail tech platform serving 13 million customers and 50k+ partners.

That scale comes with responsibility. From cybersecurity to data governance and emerging AI risks, you help the organization stay in control while continuing to innovate at speed. The challenge is striking the right balance between enabling business growth and managing tech and data risks effectively.

The biggest challenge

The biggest challenge for this role is balancing rapid tech innovation with strict regulatory compliance while managing senior stakeholder expectations. Because bol operates a massive retail platform at high speed, you must successfully translate heavy frameworks like NIS2, DORA, and the AI Act into actionable controls without slowing down product teams or creating operational bottlenecks. The real difficulty lies in having the professional weight and diplomacy to act as a trusted advisor who can independently push back on senior leadership, challenge their risk assessments, and drive formal risk acceptance processes rather than letting them take the easy way out.

What you’ll do

As an expert within the organization, you provide data-driven insights into tech, cyber, and data risks, strengthening risk-based decision-making across all tech, data, and product domains. You drive a structured risk management cycle to enhance the maturity of the Tech & Data Risk Management frameworks, while enabling teams to identify, assess, and mitigate risks proactively. Furthermore, you continuously improve and embed risk processes, taxonomies, and reporting into the organization's daily operations.

In this role, you act as a trusted advisor to senior stakeholders and leadership teams on Tech & Data Risk Management frameworks. You engage closely with senior management to ensure clear visibility of key risks and drive formal risk acceptance processes. In doing so, you provide independent challenge and oversight on both risk assessment outcomes and risk acceptance decisions. To support senior leadership and governance oversight, you develop and deliver high-quality risk insights and reports.

On the regulatory front, you translate complex regulations such as NIS2, GDPR, DORA, and the AI Act into actionable controls and policies, ensuring the organization maintains constant readiness for regulatory inspections and supervisory expectations. Ultimately, you help shape the future of risk management within a fast-moving tech organization. You don’t just assess risks; you raise the bar for how they are managed.

Why you can make a difference

You make a difference by moving away from traditional, checkbox risk management and instead raising the bar for how tech, cyber, and data risks are managed across complex tech and product domains. Leveraging your deep expertise in cloud environments, microservices, and modern DevOps ways of working, you translate complex regulations like DORA, NIS2, and the EU AI Act into practical, actionable policies that teams can easily embed into their daily operations. By acting as a highly trusted advisor, you provide the necessary independent challenge to senior management, guiding them through formal risk acceptance processes and driving data-driven, risk-based decision-making that ensures the platform remains both cutting-edge and fully secure.

3 reasons why this is (not) for you

This role is for you if:

• Tech, Cybersecurity & data risk connoisseur: You’re passionate about managing risks in Tech & Data, cybersecurity, and emerging tech (AI)
• Agile native: You thrive in DevOps / Agile environments and understand how risk fits into product development
• Courageous challenger: You know risk and compliance isn’t always the most popular topic, and that motivates you even more

This role is not for you if:

• You see the big picture, but structuring risks into clear frameworks and taxonomies doesn’t excite you
• You avoid engaging senior stakeholders or challenging decisions where needed
• You prefer working solo rather than collaborating across teams

Where you'll be working

You will be joining one of the leading retail tech platforms in the Netherlands and Belgium, a dynamic environment powered by over 2,800 colleagues who serve 13 million customers, manage a catalog of more than 35 million items, and support over 50,000 partners. In this fast-paced setting, retail is continuously reinvented, and that includes how risk is managed.

As part of the Tech & Data Risk Team, you will step into an environment where collaboration always trumps hierarchy, and learning is prioritized over blaming. It is a culture where innovation and risk awareness go hand in hand. Within this team, you will work alongside highly experienced professionals while still enjoying plenty of room to shape the direction of the framework yourself.

Perks

• 29 days to recharge
• Travel costs for public transport, car, parking, and charging covered
• Pension plan with 75% premium covered
• Annual bonus based on sustainability goals