IT Risk & Control Officer - CRO IT & Cyber

At a glance

Structure a complex topic and function into effective operations
ABN AMRO works with the three lines of defence model. Within Risk Management, the CRO IT & Cyber function provides 2nd line oversight of IT risk, information security and cyber security, third-party and outsourcing risk, as well as business continuity and physical security risk. More and more these areas are converging into what we label digital and operational resilience.CRO IT & Cyber has specialized teams per risk type. But an overarching and facilitating Risk & Control team ensures an effective risk practice, an efficient team, with clear alignment to risk policies and quality output in risk reporting.

• IT Risk & Control Officer - CRO IT & Cyber
• Nederland Amsterdam
• 36-40
• Schaal 13: € 8.192 - € 11.702 pm

Your job

We are looking for an experienced risk manager who will become part of a small team to facilitate the CRO IT & Cyber function and to consolidate individual findings into overarching view points and opinions. You will also define, formalize and steer our ways of working and help the team to deliver output according to a clear and formalized process. You have a thorough understanding of IT and cybersecurity. This will enable you to digest the information coming from the teams into a wider picture. You also have a thorough understanding of risk management, which will enable you to structure and simplify our way-of-working. You have a can-do mentality and are quick on the ball, as we are faced continuously with deadlines and short-term deliveries.

In more detail, depending on your profile and the work division in your team, you are expected to work on:

• Ensuring proper risk instruments for our function, for instance policy, standards, risk management processes, charters, which are aligned with enterprise risk management and introduced to our 1LoD counterparts;
• Maintain and monitor our annual agenda of work, ensure that quality-delivery is done on time. This will require a mix of internal work division and coordination, proactive individual contributions, and stakeholder engagement;
• Deliver planned and unplanned risk reporting, risk memo’s and other inputs for stakeholders like ExBo, SB, CU CRO’s;
• Enable, facilitate and monitor an effective practice of risk identification, risk monitoring, risk administration and risk closure;
• Enable, facilitate and monitor an effective practice for control design effectiveness and control operating effectiveness monitoring and testing.
• Drive our ambition to apply a more data-driven risk management approach by leveraging available dashboarding as well as by developing additional analytical capabilities where needed.
• Facilitate the MT CRO IT & Cyber with unplanned work items that require (quick) delivery.

As one of our Risk & Control managers, you will play a key role in building and expanding our CRO IT & Cyber function.

Your profile

You are a risk professional with a strong interest in data, technology, resilience, outsourcing and innovation. You understand that technology provides opportunities, but also requires careful risk management. You are able to maintain a helicopter perspective on our way of working as well as on the content of the relevant risk types. You enjoy working towards delivery together with relevant colleagues. You take ownership and responsibility for that. You can challenge constructively, advise pragmatically and help stakeholders move forward. You are comfortable operating in a developing area where frameworks, expectations and practices are still maturing.

We are offering

We offer a permanent role in a newly created team with a clear strategic purpose. You will have the opportunity to contribute to an important area of risk management and help shape how our organisation manages technology, outsourcing and resilience risks. You will work on topics that are relevant, complex and visible. You will collaborate with colleagues across risk, technology, data, security and the business, and you will help build a practice that supports responsible innovation.

This role offers:

• The opportunity to help develop a new function to a next maturity level.
• A role with direct relevance to the organisation’s strategy.
• Exposure to senior stakeholders and multidisciplinary decision-making.
• A chance to work at the intersection of risk, technology, data and business change.
• Room to develop expertise in a rapidly evolving field.