Technology & Innovation Risk (Project) Managers; focus on Business Resilience

With the arrival of GenAI, the increasing use of data and the acceleration of inclusion of emerging technologies, Rabobank is turning even more into a tech company. In an ever changing world, the bank must remain permanently aware of the trust placed in it and be diligent in protecting its core systems, communication channels and data.

This transformation brings challenging and exciting topics related to Information Security, Third Party, Business Continuity and IT Risks, as the IT landscape becomes increasingly connected to external parties, cloud and mobile applications.

In this role, you will contribute to a Rabobank that stays in control of its IT risks through strong, fact-based challenge and oversight. You will help facilitate this transformation based on your thorough knowledge and sound experience with IT risk.

For Rabobank, risk management is at the core of doing business, with an increasing focus on IT risks. The Technology & Innovation Risk Management team is expanding and is looking for support in risk management with a focus on Business Resilience, specifically Business Continuity and Third Party Management Risks oversight. Project management skills are important to contribute successfully to department-wide initiatives.

Given the constant state of change in risk management, the team runs simultaneous projects to translate emerging risks and regulatory requirements into policies, procedures and products. Executing these projects on time and with the right quality is an important factor in success.

Practical Examples

In your role you will:

• Challenge domains and entities of Rabobank Group regarding Business Resilience risks.
• Oversee and challenge the Third Party and Business Continuity risk management activities, including specific domains and entities of the Group.
• Support in the challenge and oversight of the COO domain within the bank.
• As part of an oversight team, use your Business Resilience expertise to help domain oversight by asking the right questions and having an opinion on Third Party and Business Continuity risks.
• Determine relevant new and updated risks with respect to Business Continuity in general.
• Monitor and challenge the Business Resilience risk profile of the business, the first line of responsibility.
• Run projects to implement changes to the risk and control framework, for example in the form of new policies, risks, controls or reporting.

Top 3 responsibilities

Challenge domains and entities of Rabobank Group regarding BCM and Third Party risks and controls, and improve the risk control framework:

• By building strong relationships with counterparts in the domains and entities across the bank, you are able to give your expert opinion on risk taking and risk management.
• In this way, the team defines an effective and efficient risk control framework, supported by Operational Risk Management tooling.
• You identify and realize efficiencies while countering relevant risks by designing effective controls.

Measure and report risk:

• As part of the team you will measure and report risk exposures and trends in the evolution of the Third Party and BCM risk profile for the domains and entities, scrutinizing them against the Risk Appetite and strategic goals.
• Reporting is done to the domains, Risk Management Committees, as well as the managing board and supervisory board.

Help implement new policies related to Third Party and BCM risks emerging around the bank:

• By running projects together with colleagues and stakeholders in the domains, you enable the timely implementation of new policies and regulations.
• You keep pace with the constantly evolving risk and regulatory landscape.

Together we achieve more than alone

The team at Technology & Innovation Risk Management is very curious about what you can bring.

“The Rabobank is continuously on the move. Within the department we work with a very talented group on a quickly developing set of IT & Innovation Risk domains, among which emerging technologies as quantum and GenAI. As IT-risk manager you get to work on a very exciting and challenging, broad set of emerging topics. Personally, I really enjoy the work atmosphere within the department and the degree of freedom you get in your work.”

IT Risk Manager

“If you like IT Risk and want to contribute to a more secure Rabobank, I really want you to apply. Given our size, the way we are organized (also internationally) and the fact that our operational landscape is more and more connected to e.g. cloud or mobile applications, I think our work is often challenging, but therefore also more exciting. This because together with colleagues I contribute to a Rabobank that’s more in control of its risks.”

IT Risk Manager

You and your talent

• University level with a relevant Master’s degree.
• IT related Risk management qualification such as CISM, CISSP, CRISC or RE.
• Formal BCM and Third Party Management qualifications are considered a plus.
• Ability to zoom in or out on risk topics as needed, set priorities, think critically, and perform challenge with an understanding for human interactions.
• Sound understanding of technology topics including identity & access management, security by design, secure cloud computing, security monitoring, networking technologies, secure architecture, and related areas.
• Sound understanding of the technicalities of operational and non-financial risk management, with broad familiarity with a variety of risk assessment analytics.
• In-depth understanding of organizational structures and business processes.
• Demonstrated good leadership, planning and managerial abilities, with solid project management and organizational skills, as well as ability to work with various internal and external stakeholders.
• Detailed understanding of the current regulatory environment for IT, operational and non-financial risks.

The following conditions will be additionally valued:

• Experience with and knowledge of project and change management. A proven track record is an extra plus point.
• Knowledge of the Rabobank organization.