Senior Cyber Security Risk Manager

• The opportunity to help develop a new function to a next maturity level.
• A role with direct relevance to the organisation's strategy.
• Exposure to senior stakeholders and multidisciplinary decision-making.
• A chance to work at the intersection of risk, technology, data and business change.
• Room to develop expertise in a rapidly evolving field.

Shape resilience where it matters most

ABN AMRO plays a vital role in society. Clients and society expect us to deliver stable and secure solutions while protecting their interests. We are part of vital infrastructure, with a responsibility to keep our society safe and protect it against financial instability. When disruption occurs, our clients, colleagues and stakeholders rely on us to keep critical services available, recover quickly and respond decisively. In a rapidly changing world, we need to move faster than ever and innovate quickly to respond to threats and stay secure.

As a Senior Cyber Security Risk Manager, you are a recognised subject-matter authority across a broad range of cyber security topics. You provide independent oversight of bank-wide cyber security maturity and actual risk exposure. You help senior stakeholders make informed decisions around cyber security, challenge the status quo and have a direct impact on our future direction. You do this by implementing and monitoring risk instruments, understanding the numbers underlying actual cyber exposure, but also deep-diving into topics and having strategic discussions with key stakeholders within the cyber security departments.

This is a senior second-line expert role. You will monitor, challenge and guide the implementation and effectiveness of cyber security within ABN AMRO. You translate complexity into clear insight, bring key messages to the table and help drive improvements through influence, expertise and constructive challenge. You will be part of the Cyber Security Risk team, which is one of the teams in the CRO IT & Cyber function within our Risk Management department.

You will:

• Provide independent oversight of cyber security maturity and actual cyber exposure across our bank-wide IT and business landscape.
• Challenge and advise 1st line teams on risk posture, controls, remediation and action plans;
• Translate findings into concise reporting and clear recommendations for senior stakeholders;
• Perform independent assessments and deep dives of key security capabilities and security of our most important systems;
• Review and challenge remediation plans, control improvements and risk acceptances;
• Identify recurring risk themes and translate them into practical improvement actions;
• lead complex bank-wide risk assessments, shape the cyber-risk oversight agenda and provide authoritative risk opinions to senior management and risk governance forums
• Support maturity improvements in cyber security risk oversight;
• Work with and help the rest of your team to perform and grow.

You are comfortable with complex environments, are up-to-date with new developments in the cyber threat landscape and in innovative ways of improving security postures. You have an understanding of a broad spectrum of IT architectures and best practices. You are able to build trust with your stakeholders. You are an experienced risk manager and are able to find the right balance between independent oversight and constructive dialogue and cooperation. You are expected to onboard quickly, operate independently in a complex environment and engage credibly with senior IT, business and risk stakeholders.

Part of the CRO IT & Cyber function

ABN AMRO works with the three lines of defence model. Within Risk Management, the CRO IT & Cyber function provides 2nd line oversight of IT risk, information security, cyber security, digital resilience and outsourcing risk. We provide independent challenge and guidance to the 1st line, focusing on the risks that matter most and on emerging threats.

Must-have

• Strong understanding of cyber security governance and best practices across a broad range of topics;
• Understanding of both cloud (Azure) and on-prem infrastructure typologies;
• Senior-level technology risk management experience, experience with oversight, control challenge and senior stakeholder engagement;
• Ability to operate independently and deliver within a fixed assignment timeframe;
• Team-player mindset, both within your team and with the wider security community;
• Strong analytical skills, sound judgement and the ability to cut through complexity;
• A hands-on mindset, quality-delivery within appropriate timelines, the ability to deliver.
• Knowledge of laws and regulations regarding cyber security and risk management within your own and adjacent focus areas.
• Strong communication skills in Dutch and/or English;

Preferred

• Understanding of Identity and Access Management design principles, architectures and governances approaches;
• Understanding of AI in the context of cyber security attacks and defence;
• Familiarity with digital operational resilience, cyber resilience, IT control frameworks or regulatory expectations;
• Experience in banking or another highly regulated environment.

The Hay grade we will hire you in will depend on experience (12/13).

We offer a role in a newly created team with a clear strategic purpose. You will have the opportunity to make a tangible contribution to a topic that is high on the agenda of the bank, regulators and society. You will work on topics that are relevant, complex and visible - interacting with industry-leading expertise and leadership on varying topics. You will collaborate with colleagues across risk, technology, data, security and the business, and you will help build a practice that supports responsible innovation. You will work closely with senior IT and risk stakeholders, provide independent challenge on decisions that matter and help strengthen ABN AMRO's resilience.

On top of this, we believe it is important to be a good employer. Joining us means stepping into a role with impact, supported by excellent employment conditions that foster your job satisfaction, development, and wellbeing.

In addition, we offer:

• An attractive gross monthly salary based on a 36‑hour work week, including holiday allowance and a flexible benefit budget.
• An excellent pension scheme, ensuring that you are well prepared for the future.
• Flexibility in working: working from home is possible in consultation with your team and depending on your role. We will provide an ergonomic home office setup for you.
• Plenty of room for relaxation with five weeks of vacation per year, supplemented by two mandatory days off. You can also purchase up to four additional weeks of vacation annually.
• Five "Banking for better days": extra days off that you can use for personal development or volunteer work.
• Personal development is key: you receive a development budget of €1,000 per year, which can accumulate up to €3,000.
• An annual public transport pass with free public transportation throughout the Netherlands for both business and private use.

You can find more information about our employment conditions and salary scales in our Collective Labour Agreement (CLA), which applies to this vacancy.

If you are interested in this position? Do apply so we can get back to you on a short notice.

Your Future: Inclusive, Innovative, Sustainable

At ABN AMRO, we believe in "Banking for better, for generations to come." Equal opportunities for everyone are a crucial foundation, as we strive for an inclusive culture where all employees feel seen, heard, and valued. Our vision of being a personal bank in the digital age aligns perfectly with the demand for surprising insights and innovative solutions, born from a diverse interplay of cultures and experiences. We focus on customer experience, sustainability, and building a future-proof bank, conducting annual reviews to ensure equal pay for equal work. Join a bank that embraces ingenuity and ambition, and make an impact with us for a better future.

If you want to apply for the B-Able or Reboot program, make sure to mention it both in the title and the content of your resume.