Risk Control Expert

Join Our Team as an IT Risk Control Expert

This is what we offer you

• Extras: a thirteenth month, 8% holiday allowance, and a 10% Employee Benefit Budget.
• Development budget: EUR 1,400 development budget per year for your growth and development.
• Hybrid working: a balance between home and office work (possible for most roles).
• Pension: decide for yourself the amount of your personal contribution.

Embark on a transformative journey with our team as an IT Risk Control Expert, where your expertise is crucial in our IT risk & control frameworks. In this pivotal role, you're not just a subject matter expert; you're a consultant, an advisor, and a team player, crafting and leading the activities that redefine how we manage IT risk and control.

You and your job

Imagine a position where your day-to-day efforts directly influence the 1st line risk management activities of Rabobank's IT department, where collaboration with a team of dedicated professionals is not just encouraged but essential to our collective success. You are part of a Change & In Control (C&IC) team who are the centre of expertise of IT risk and controls and are the trusted 1LoR advisor and 2LoR liaison, fostering standardization, quality standards and knowledge transfer. C&IC is not primarily concerned with Audit, but works closely together with the Special Frameworks team who take care of that element.

In order to achieve our strategic ambitions we are looking to expand the team with two new hires: one IT Risk Control Expert and one Senior IT Risk Control Expert.

Practical Examples:

• Risk Control Framework translation between 2LoR and 1LoR IT and provide guidance for 1LoR teams
• Coordination of Dynamic Risk Cycle in CITO including training of 1LoR IT
• Provide expertise for resolving many ad hoc and sometimes urgent topics on the senior-and / or executive management level
• Set up and maintain structured, coherent and increasingly automated methodology for answering questionnaires (such as ITRQ from ECB) or ad hoc queries (from Audit Committee or Regulators).

Facts & Figures

• You will be part of a team of approximately 30 professionals dedicated to IT risk and control management.
• 43,822 Rabobank colleagues worldwide

Key responsibilities

• Consultancy and Advisory: Act as a consultant and advisor within the first line risk team, providing expert guidance on risk management and control activities.
• In-depth IT Risk Knowledge: Utilize your extensive knowledge of IT risk management to advise on improving risk and control processes and ensuring compliance.
• Stakeholder Management: Engage with stakeholders across various levels of the organization, translating their input into actionable guidelines and requirements.
• Proactive and Autonomous Work: Take initiative in identifying and addressing IT risk-related issues, working autonomously to drive improvements and efficiencies.

Within Rabobank's CITO (Chief Innovation & Technology Office), there’s a community with over 150 first-line risk & control colleagues. You'll join the Control Office, a team of approximately 30 professionals dedicated to IT risk and control management whose purpose is to “strengthen, simplify, and safeguard the control environment for innovation and technology to enable secure, seamless banking anytime, anywhere. We act as a central hub, connecting various IT divisions and ensuring the alignment of IT activities with overarching risk and compliance policies”. The CITO Control Office is the crucial link between IT, the business, and external stakeholders, including regulators like the ECB. This involves not only monitoring and reporting but also proactive risk management and guiding the organization through regulatory compliance. We foster a collaborative and supportive environment, characterized by open communication and a shared commitment to excellence. Our team values both professional expertise and a friendly, approachable work atmosphere.

Together we achieve more than alone

The 30 people at CITO Control Office support the domain in establishing a risk governance structure that ensures senior management can steer on the right priorities to keep a healthy risk profile and be in control. Working together is the way we work; as 1 results-driven team at Rabobank. Speaking of Rabobank: we are a Dutch bank that operates in 38 countries for over 9,500,000 customers.

Work on yourself & the world around you

At Rabobank, your development and that of society go hand in hand. That’s why we invest in you and work together for a better world. At Rabobank, you work on yourself and the world around you.

You will benefit from a personal development budget, a hybrid working environment, and a good work-life balance. You will contribute to banking for both private and business customers, as well as to societal issues such as food and energy transitions.

You and your talent

• Experience: Either 3-5 years or 5-10 (Senior) years in an IT Risk Management function, continuously seeking and implementing improvements with a proven track record in risk and control within technology-driven environments.
• Conceptual and Strategic Thinking: Ability to anticipate future risk challenges, and identify opportunities for improving risk and control processes and overall risk profile.
• Stakeholder Engagement: Skilled in engaging with stakeholders and translating their input into effective risk management approach and guidance.
• Professional Drive: Driven and pragmatic, with the ability to quickly understand various processes and translate knowledge into action.
• Framework Knowledge: Familiarity with risk management frameworks like COBIT, ISO 27000, and Assurance reports (such as ISAE 3402 and AICPA SOC reports).
• Organizational Navigation: Strong understanding of complex organizational dynamics and the ability to influence effectively.
• Training and Communication: Proficient in conveying risk management processes through training sessions and maintaining clear instructions and templates.
• Certifications: CRISC or CISM certifications are a plus.

🚨 To be considered for this position, you must be located in the Netherlands or elsewhere in the EU and have the legal right to work in the Netherlands. We are unable to consider candidates requiring relocation from another country.