Exposure Management Analyst

At a glance

Vulnerability Management is evolving from simply identifying vulnerabilities to understanding and reducing real business exposure. The real challenge is understanding where we are actually exposed, what matters most, and what needs to be fixed first. We are looking for an Exposure Management Analyst who wants to contribute to this transformation.

Do you enjoy working closely with Product Owners, engineers, security specialists, and stakeholders to support and enhance our Exposure Management capability? And are you someone who is curious about modern security technologies, willing to challenge assumptions, eager to learn, and focused on delivering results?

• Nederland Amstelveen
• IT
• 36-40
• Schaal 11: € 6.066 - € 8.666 pm

Your job

As an Exposure Management Analyst, you analyse security findings across our technology landscape and turn them into a clear view of cyber exposure. You look beyond individual vulnerabilities and bring together technical findings, asset and business context, threat information, attack paths, existing controls and validation results.

• Analyse vulnerabilities, misconfigurations and other security weaknesses to identify meaningful exposures.
• Combine findings with context such as asset criticality, reachability, exploitability, threat activity and existing security controls.
• Prioritise exposures based on actual risk instead of relying primarily on CVSS or severity.
• Work with technical teams to understand exposures and drive them towards remediation or mitigation.
• Use validation and adversarial testing results to determine whether suspected exposures can actually be exploited.
• Stays up-to-date and can quickly understand new technologies and trends.
• Takes ownership, cuts through complexity, and drives initiatives from idea to implementation.
• Identify gaps in our current visibility, data and analysis capabilities.
• Help automate exposure analysis and prioritisation wherever possible.
• Contribute to the further development and implementation of our Exposure Management / CTEM approach.

Working environment

You will be part of the Security Assurance team within the Corporate Information Security Office (CISO) of ABN AMRO in the Netherlands. Within the team, we work together in an informal and supportive environment, offering plenty of variety and opportunities for professional growth and development. ABN AMRO embraces an agile way of working, where speed, collaboration, innovation, and continuous improvement are highly valued. As a Domain Expert, this means working closely with colleagues from different disciplines and departments to achieve common goals while further developing your expertise in cybersecurity and Exposure Management.

Your profile

To be successful in this role you need to recognize yourself in the following profile:

Your work helps teams focus their effort on the exposures that create the most meaningful risk.

At the same time, you will actively help us mature from traditional vulnerability management towards Continuous Threat Exposure Management (CTEM).

You have a strong interest in innovation and actively keep up with developments in Continuous Threat Exposure Management (CTEM), and AI-driven security practices. You are eager to learn about emerging technologies, contribute new ideas, and support initiatives that strengthen the bank's security posture.

This role requires a proactive and collaborative mindset. You take ownership of your responsibilities, build effective working relationships, and contribute to achieving shared goals.

Success in this role means contributing to the implementation and adoption of Exposure Management capabilities, supporting strategic initiatives, and helping improve the bank's overall security posture through measurable outcomes.

We are offering

We believe it is important to be a good employer. Joining us means stepping into a role with impact, supported by excellent employment conditions that foster your job satisfaction, development, and wellbeing.

In addition, we offer:

• An attractive gross monthly salary based on a 36-hour work week, including holiday allowance and a flexible benefit budget.
• An excellent pension scheme, ensuring that you are well prepared for the future.
• Flexibility in working: working from home is possible in consultation with your team and depending on your role. We will provide an ergonomic home office setup for you.
• Plenty of room for relaxation with five weeks of vacation per year, supplemented by two mandatory days off. You can also purchase up to four additional weeks of vacation annually.
• Five “Banking for better days”: extra days off that you can use for personal development or volunteer work.
• Personal development is key: you receive a development budget of €1,000 per year, which can accumulate up to €3,000.
• An annual public transport pass with free public transportation throughout the Netherlands for both business and private use.

You can find more information about our employment conditions and salary scales in our Collective Labour Agreement (CLA), which applies to this vacancy.