Associate Director, Technology Risk Strategy & Transformation

Job description

We are not a traditional consultancy. We work at C-level with blue-chip companies on the programmes that actually matter, and we are building our Technology Risk practice at exactly the moment the market needs it most.

Your role as Associate Director, Technology Risk Strategy & Transformation

This is a senior client-facing role at the heart of Riverflex's S&T practice. You will lead technology risk advisory engagements end-to-end - developing risk strategies, target operating models and regulatory transformation roadmaps for clients navigating DORA, NIS2, AI Act and beyond. You will hold C-level relationships, carry a personal sales target, and have a clear path to Director within 12–18 months.

What you’ll do

• Lead tech risk strategy and transformation engagements for blue-chip clients in FS and Retail - from initial diagnosis through to delivery oversight.
• Develop credible risk strategies and operating models that meet regulatory expectations and stand up to board scrutiny.
• Work across the pillars of cyber strategy, IT controls, third-party risk, GRC operating models, and DORA/NIS2/AI Act compliance programmes.
• Build and own executive narratives - you write the board-level story and defend it in the room.
• Originate and grow client relationships - €1m personal sales target in year one, with founder support behind you.
• Contribute to practice development: methodology, IP, and team capability.

Who you are

• 10+ years of experience, with at least 5 years in management consulting at a recognised firm (Big 4 Risk Advisory, specialist boutique, or in-house from a regulated environment and ready to return to consulting).
• Proven track record leading tech risk advisory engagements across strategy, controls, regulatory programmes, and third-party risk.
• Substantive knowledge of the EU regulatory landscape: DORA, NIS2, AI Act, GDPR - you know the detail, not just the acronyms.
• Comfortable at C-suite level: you hold your own with CISOs, CTOs and boards without a director in the room.
• Quantitatively credible, with experience in risk quantification, control investment business cases, and prioritisation frameworks.
• Financial Services background strongly preferred; Retail is a real asset.
• EU-eligible or open to a Dutch highly skilled migrant visa - we sponsor. 30% ruling support available.

What we offer

• A competitive compensation package.
• 25 days off per year, plus a full week off between Christmas and New Year.
• Flexible work from abroad for up to 6 weeks per year.
• Pension scheme to help you plan for your future.
• Learning & Development budget, including full access to all Udemy courses.
• ClassPass membership.
• Access to the latest tools: ChatGPT Pro, Claude, Notion, Sembly, SlideHub and Riverflex's in-house developed software.
• Equity share scheme for long-term team members.
• A clear path to Director with profit-share upside.

Why join now?

Riverflex is growing its Technology Risk practice at the exact moment the market is moving. DORA is live, NIS2 is biting, and the AI Act is reshaping every CISO's agenda. You will step in with real client demand behind you, founder-level backing, and the autonomy to build something, not just fill a seat.