Supply Chain Risk Officer

Do you agree that security is a major asset within the bank? Do you like to dive into complex processes? Are you good in cooperation and stakeholder management and do you want to keep our vendor portfolio safe so our 3rd parties don’t impact us? Then we're looking for you! As a Senior Supply Chain Security Expert in our Supply Chain Security (SCS) team you will be responsible to manage, monitor and report on the performance and the status of the security posture of our vendors and improve our service.

At a glance

The team works according to the DevOps & Agile methodology. You are working on improving the Supply Chain Security services, based on user stories. Occasionally there are incidents that occur that you are going to look into. For your work you often engage with various stakeholders such as other IT departments, business colleagues and software suppliers.

Your job

What does your working day look like?

Key responsibilities in your work contain:

• Govern and manage IT vendor relationships in terms of performance regarding the security aspects of the underlying contractual obligations.
• Execute Vendor Security Risk Assessments and perform follow-up actions. Focus on the risks that matter, translate them into the business context and help your stakeholders to address security challenges.
• Ensure that information security risks are identified and managed effectively throughout all stages of the relationship with external vendors.
• Review the applicability and the quality level of assurance reports issued by third parties.
• Ensure continuous improvements are achieved both in the quality of reporting and service provided by the third party.
• Manage the IT security-related part of a contract with the third-party provider. Work together with 2nd line functions such as legal, compliance, procurement and other internal parties on contractual changes.
• Help solve security-related questions, take initiative and escalate in time if needed.
• Signal improvements related to the way of working inside the team and contribute to improving the excellence of our service offering.
• Stay up to date with emerging cyber security trends and the latest developments in technology, information risk and threats, actively share this knowledge with your colleagues and help determine if and when to integrate them into the assessment program.

Working environment

You will join the Supply Chain Security (SCS) team, part of the Corporate Information Security Office (CISO) department, within the Cyber Defence grid. CISO employs approximately 400 colleagues who are responsible for the bank's information security globally, across all subsidiaries and countries. The Cyber Defence grid is responsible for the security operations activities of ABN AMRO, and within our team we continuously provide visibility into the security posture of ABN AMRO’s vendors. The Supply Chain Security team members are experienced in information security and vendor relations. The team is diverse in both nationalities and professional background, which makes it a great place to work and develop yourself. The team currently consists of 10 members and is ready for further expansion. The working language within the team is English.

Your profile

• HBO or University degree.
• Knowledge and experience with setting up projects & deliverables within supply chain security / TPSRM.
• Experience in executing information security risk assessments.
• Knowledgeable in one or more areas such as security processes, technology architectures, network security, application security and vulnerability management.
• Excellent stakeholder management skills.
• Hands-on, self-organised, willing to finish and deliver (execution power).
• A strong ability to translate technical risks into business risks and vice versa.
• Service-oriented professional who enjoys taking on an internal consultancy role.

We are offering

We believe it is important to be a good employer. Joining us means stepping into a role with impact, supported by excellent employment conditions that foster your job satisfaction, development and wellbeing.

In addition, we offer:

• An attractive gross monthly salary based on a 36-hour work week, including holiday allowance and a flexible benefit budget.
• An excellent pension scheme, ensuring that you are well prepared for the future.
• Flexibility in working: working from home is possible in consultation with your team and depending on your role. We will provide an ergonomic home office setup for you.
• Plenty of room for relaxation with five weeks of vacation per year, supplemented by two mandatory days off. You can also purchase up to four additional weeks of vacation annually.
• Five “Banking for better days”: extra days off that you can use for personal development or volunteer work.
• Personal development is key: you receive a development budget of €1,000 per year, which can accumulate up to €3,000.
• An annual public transport pass with free public transportation throughout the Netherlands for both business and private use.