Technology & Innovation Risk (Project) Managers; focus on Business Resilience

With the arrival of GenAI, the increasing use of data and the acceleration of emerging technologies, Rabobank is increasingly becoming a tech company. This transformation brings challenging and exciting topics related to Information Security, Third Party, Business Continuity and IT Risks, as the IT landscape becomes more connected to external parties, cloud and mobile applications.

Risk management is at the core of doing business at Rabobank, with an increasing focus on IT risks. The Technology & Innovation Risk Management team is expanding and is looking for support with risk management expertise focused on Business Resilience oversight, especially Business Continuity and Third Party Management Risks. Project management skills are important to contribute successfully to department-wide initiatives.

Given the constant state of change in risk management, the team runs simultaneous projects to translate emerging risks and regulatory requirements into policies, procedures and products. Executing these projects on time and with the right quality is an important factor in success.

Practical Examples

In this role you will:

• Challenge domains and entities of Rabobank Group regarding Business Resilience risks by overseeing and challenging the Third Party and Business Continuity risk management activities, including specific domains and entities of the Group.
• Support in the challenge and oversight of the COO domain within the bank.
• As part of an oversight team, use your Business Resilience expertise to help domain oversight by asking the right questions and having an opinion on Third Party and Business Continuity risks.
• Determine relevant new and updated risks with respect to Business Continuity in general.
• Monitor and challenge the Business Resilience risk profile of the business, the first line of responsibility.
• Run projects to implement changes to the risk and control framework, including new policies, risks, controls or reporting.

Top 3 responsibilities

• Challenge domains and entities of Rabobank Group regarding BCM and Third Party risks and controls, and improve the risk control framework. By building strong relationships with counterparts in the domains and entities across the bank, you are able to give your expert opinion on risk taking and risk management.
• Measure and report risk exposures, and trends in the evolution of the Third Party and BCM risk profile for the domains and entities, scrutinizing them against the Risk Appetite and strategic goals. Reporting is done to the domains, Risk Management Committees, as well as the managing board and supervisory board.
• Help implement new policies related to Third Party and BCM risks emerging around the bank. By running projects together with colleagues and stakeholders in the domains, you enable the timely implementation of new policies and regulations.

Together we achieve more than alone

The team at Technology & Innovation Risk Management is curious about what you can bring.

“The Rabobank is continuously on the move. Within the department we work with a very talented group on a quickly developing set of IT & Innovation Risk domains, among which emerging technologies as quantum and GenAI. As IT-risk manager you get to work on a very exciting and challenging, broad set of emerging topics. Personally, I really enjoy the work atmosphere within the department and the degree of freedom you get in your work.”

IT Risk Manager

“If you like IT Risk and want to contribute to a more secure Rabobank, I really want you to apply. Given our size, the way we are organized (also internationally) and the fact that our operational landscape is more and more connected to e.g. cloud or mobile applications, I think our work is often challenging, but therefore also more exciting. This because together with colleagues I contribute to a Rabobank that’s more in control of its risks.”

IT Risk Manager

You and your talent

• University level with a relevant Master’s degree.
• IT-related risk management qualification such as CISM, CISSP, CRISC or RE.
• Formal BCM and Third Party Management qualifications are considered a plus.
• Ability to zoom in or out on risk topics as needed, set priorities, think critically and perform challenge with an understanding for human interactions.
• Sound understanding of technology topics including identity & access management, security by design, secure cloud computing, security monitoring, networking technologies, secure architecture, and related areas.
• Sound understanding of the technicalities of operational and non-financial risk management, with broad familiarity with a variety of risk assessment analytics.
• In-depth understanding of organizational structures and business processes.
• Demonstrated good leadership, planning and managerial abilities, with solid project management and organizational skills, as well as the ability to work with various internal and external stakeholders.
• Detailed understanding of the current regulatory environment for IT, operational and non-financial risks.

The following conditions will be additionally valued:

• Experience with and knowledge of project and change management. A proven track record is an extra plus point.
• Knowledge of the Rabobank organization.