Senior Risk Manager IT, Transformation & Outsourcing

International Card Services (ICS) is a 100% subsidiary of ABN AMRO Bank N.V. with its own bank license. ICS is a payment service provider and market leader in issuing credit cards in the Netherlands. We have been issuing, promoting, administering, and processing payments of Visa and Mastercard credit cards for over 30 years. ICS issues credit cards both under its own brand and in conjunction with co-branding partners, for both Consumer and Commercial clients.

Are you an experienced risk professional who can help control risk in a major transformation programme? Do you combine independent challenge with a hands-on, delivery-focused mindset? Then this role could be for you.

Senior Risk Manager IT, Transformation & Outsourcing

As Senior Risk Manager IT, Transformation, Outsourcing and Third-party Risk Management (TPRM), you are responsible for risk management within one of ICS’s major transformation programmes, with a strong focus on outsourcing and TPRM. You ensure that material risks are identified, challenged, mitigated and escalated throughout the transformation lifecycle.

You act as a senior risk partner to programme leadership and key stakeholders. You provide clear challenge and advise on readiness for governance decisions.

You will report directly to the Head of IT Risk.

Your Responsibilities

• Drive and coordinate the delivery of agreed risk outcomes across key transformation and outsourcing milestones, with focus on ICT and Third-party risks.
• Identify, assess and mitigate risks across design, implementation, migration and transition to business-as-usual.
• Translate risk appetite and regulatory requirements into clear conditions and actions.
• Deliver updated control framework to manage the outsourced relationship for the full scope of the contract.
• Ensure alignment with outsourcing, operational resilience and regulatory obligations.
• Provide independent, constructive challenge to programme management, vendors and governance bodies.
• Maintain oversight of the programme’s evolving risk profile and drive timely execution of risk mitigation plans.
• Escalate material risks, control gaps, dependencies and unresolved conditions in a timely manner.
• Prepare and provide risk advice on risk acceptance, remediation priorities and readiness for key governance decisions, supporting the Risk MT in Board-facing decision-making preparation.
• Coordinate risk input from IT Risk, Operational Risk, Security, Compliance, Legal, Procurement, Privacy and BCM.
• Deliver risk insights and reporting that support timely and informed decision making.
• Induction program on vendor risk management for ICS risk team and ICS business owners.

Werkomgeving

The culture within ICS can be described as family-oriented, helpful, people-oriented, and service oriented. Our core values are:

• Courage
• Care
• Collaboration

Je profiel

You are an experienced risk professional who combines independent oversight with a pragmatic, delivery-focused approach. You challenge where needed, engage where necessary and take responsibility for driving high-quality risk input and follow-up.

You bring:

• Significant experience in IT & Cyber risk, operational risk, technology risk or non-financial risk management.
• Proven experience working in large and complex transformation programmes.
• Strong knowledge of outsourcing, third-party risk management and operational resilience.
• Experience with technology migrations, major change initiatives or outsourced service transitions.
• Experience in assessing migration risks related to data integrity, interface continuity, transaction processing and reconciliation.
• The ability to assess strategic, operational, technology, cyber, regulatory and contractual risks in an integrated manner.
• The confidence to challenge senior stakeholders and programme leadership constructively.
• Strong stakeholder management skills across business, technology, risk, legal and vendor organisations.
• The ability to translate complex risks into clear decisions, conditions and actionable mitigation measures.
• Strong ownership in driving agreed risk outcomes and the ability to deliver results through stakeholders.
• Experience in the financial services sector, third party assurance and knowledge of relevant regulatory requirements are considered a strong advantage (e.g. familiarity with DORA, EBA Outsourcing Guidelines, GDPR). Also experience with modern payment infrastructure, large-scale transaction processing, cloud and API-driven technologies is a strong plus.
• Good understanding of both English and Dutch, spoken and written.

Wij bieden

• Strong alignment with and exposure to the CRO Cyber & IT organisation at group level, offering broad development opportunities and future career prospects across the organisation.
• The opportunity to bring out the best in yourself, with plenty of opportunities to grow personally and professionally.
• A good work and life balance, for example the opportunity to pro-actively work on your vitality and fitness.
• A personal development budget of EUR 1.000 per year, chances to visit tech seminars and events.
• Required investments to boost your personal skills and progress your career.