Supply Chain Risk Officer

Do you agree that security is a major asset within the bank? Do you like to dive into complex processes? Are you good in cooperation and stakeholder management, and do you want to help keep the vendor portfolio safe so third parties do not create risk? As a senior Supply Chain Security Expert in the Supply Chain Security (SCS) team, you will be responsible for managing, monitoring, and reporting on the performance and status of the security posture of vendors, while improving the service.

Your job

What does your working day look like? The team works according to the DevOps & Agile methodology. You will work on improving the Supply Chain Security services based on user stories. Occasionally, incidents occur that you will investigate. In your work, you will often engage with various stakeholders such as other IT departments, business colleagues, and software suppliers.

Key responsibilities

• Govern and manage IT vendor relationships in terms of performance regarding the security aspects of the underlying contractual obligations.
• Execute Vendor Security Risk Assessments and perform follow-up actions. Focus on the risks that matter, translate them into the business context, and help stakeholders address security challenges.
• Ensure that information security risks are identified and managed effectively throughout all stages of the relationship with external vendors.
• Review the applicability and quality level of assurance reports issued by third parties.
• Ensure continuous improvements are achieved both in the quality of reporting and the service provided by the third party.
• Manage the IT security-related part of a contract with the third-party provider. Work together with 2nd line functions such as legal, compliance, procurement, and other internal parties on contractual changes.
• Help solve security-related questions, take initiative, and escalate in time if needed.
• Identify improvements related to the way of working inside the team and contribute to improving the excellence of the service offering.
• Stay up to date with emerging cyber security trends and the latest developments in technology, information risk, and threats, actively share this knowledge with colleagues, and help determine if and when to integrate them into the assessment program.

Working environment

You will join the Supply Chain Security (SCS) team, an international and ambitious team where you will learn a lot about supply chain security. The team is part of the Corporate Information Security Office (CISO) department, within the Cyber Defence grid. CISO employs approximately 400 colleagues who are responsible for the bank's information security globally, across all subsidiaries and countries. The Cyber Defense grid is responsible for the security operations activities of ABN AMRO, and within this team there is continuous visibility into the security posture of the bank’s vendors. The Supply Chain Security team members are experienced in information security and vendor relations. The team is diverse in both nationalities and professional background, making it a strong place to work and develop yourself. The team currently consists of 10 members and is ready for further expansion. The working language within the team is English.

Your profile

• HBO or University degree
• Knowledge and experience with setting up projects and deliverables within supply chain security / TPSRM
• Experience in executing information security risk assessments
• Knowledge of one or more areas such as security processes, technology architectures, network security, application security, and vulnerability management
• Excellent stakeholder management skills
• Hands-on, self-organised, and willing to finish and deliver
• A strong ability to translate technical risks into business risks and vice versa
• Service-oriented professional who enjoys taking on an internal consultancy role

We are offering

Joining this role means stepping into a position with impact, supported by employment conditions that foster job satisfaction, development, and wellbeing.

• An attractive gross monthly salary based on a 36-hour work week, including holiday allowance and a flexible benefit budget.
• An excellent pension scheme.
• Flexibility in working: working from home is possible in consultation with your team and depending on your role. An ergonomic home office setup will be provided.
• Five weeks of vacation per year, supplemented by two mandatory days off. You can also purchase up to four additional weeks of vacation annually.
• Five “Banking for better days”: extra days off that you can use for personal development or volunteer work.
• A development budget of €1,000 per year, which can accumulate up to €3,000.
• An annual public transport pass with free public transportation throughout the Netherlands for both business and private use.