Senior IT Security Professional – FEC CDD Detection

Use your 10+ years of cyber security experience to strengthen secure software delivery within Rabobank’s FEC CDD Detection Area. As Senior IT Security Professional – FEC CDD Detection, you know the secrets of embedding security, resilience, fraud prevention and compliance throughout the software development lifecycle.

• Hybrid
• Utrecht (NL)
• 36 hours
• Fulltime

This is what we offer you

• Salary: Gross monthly salary between EUR 5,994 and EUR 8,563 (scale 10) for a 36-hour work week.
• Extras: a thirteenth month, 8% holiday allowance, and a 10% Employee Benefit Budget.
• Development budget: EUR 1,400 development budget per year for your growth and development.
• Hybrid working: a balance between home and office work (possible for most roles).
• Pension: decide for yourself the amount of your personal contribution.

Use your 10+ years of cyber security experience to strengthen secure software delivery within Rabobank’s FEC CDD Detection Area.

You & your role

As Senior IT Security Professional – FEC CDD Detection, you know the secrets of embedding security, resilience, fraud prevention and compliance throughout the software development lifecycle. You are the main adviser on information technology risk and security within the area.

You work closely with technical leads, architects and product teams to design, build and operate secure solutions that meet internal standards and external regulatory requirements.

Examples from practice

• Advising a product team on security measures when designing and building a new solution.
• Coordinating the response to a vulnerability and helping teams address the related risks.
• Preparing teams for an audit by reviewing security controls, evidence and reporting.

Facts & figures

• 36 - 40 hours a week.
• 10+ years of experience in cyber security and information technology risk management.
• Over 48,000 Rabobank colleagues worldwide.

Top 3 responsibilities

• Lead security within the FEC CDD Detection Area and advise teams on information technology risks and security decisions.
• Embed secure design, coding, testing and operations throughout the software development lifecycle, including vulnerability management and incident response.
• Improve compliance and audit readiness through clear security reporting, coaching and practical secure-by-design and DevSecOps guidance.

You connect internal and external security developments and translate them into practical improvements for teams, processes and solutions.

Together we achieve more than alone

The colleagues of the FEC CDD Detection Area work to build and operate secure solutions for customer due diligence detection. Collaboration is our way of working, as one focused team within Rabobank. You work closely with technical leads, architects and product teams to make security part of everyday decision-making.

Work on yourself & the world around you

For us, your development and that of society go hand in hand. That is why we want to invest in you and work together to create a better world.

This is reflected in your personal development budget, our hybrid work environment and a good work-life balance. You can also work on banking matters for our personal and business clients, as well as on social issues such as the food and energy transitions.

You & your talent

• Bachelor’s or master’s degree in computer science, cyber security, information security, information technology or engineering, or equivalent experience.
• 10+ years of experience in cyber security and information technology risk management.
• 5 to 10 years of experience in banking, financial services, fraud prevention, sanctions or another regulated environment.
• Experience with Databricks, Camunda or Azure security.
• Affinity with DevSecOps and penetration testing.
• Experience with preparing for and assisting with audits and risk assessments.
• Strong stakeholder management and cross-functional collaboration skills.
• Analytical thinking, problem-solving skills and risk-based decision-making.
• Strong communication, coaching and mentoring skills.

Education & Certifications

• Bachelor's or master degree in Computer Science, Cyber Security, Information Security, IT, or Engineering (or equivalent experience).
• CISSP, CISM, CISA.

Preferred Certifications

• CEH, CCSP.
• Microsoft Security Certifications, AWS security certifications.
• GISF, GIAC.

Technical Knowledge

• Secure SDLC / DevSecOps.
• OWASP Top 10 & Threat Modelling.
• Identity & Access Management (IAM).
• Authentication, Authorisation, Encryption & Key Management.
• Vulnerability Management & Security Monitoring.
• Azure Cloud Security.
• Zero Trust & Defence-in-Depth.
• Network Security & Security Automation.
• Cloud Architecture & Security and SaaS Solutions.
• Pega / Pega Cloud knowledge is a plus.
• Operational Resilience.

A reliability assessment is part of the procedure.