Senior Risk Manager Third-Party & Outsourcing Risk

Strengthen third-party risk management across our organisation

ABN AMRO relies on third parties and outsourcing arrangements across its client units, subsidiaries and countries. Managing these risks effectively requires clear ownership, strong governance and consistent application of third-party and outsourcing risk requirements across the organisation.

Within Risk Management, CRO IT & Cyber provides second-line oversight of third-party and outsourcing risk. The Third Party & Outsourcing Risk team challenges how client units, subsidiaries and countries identify, manage and monitor these risks and helps ensure a consistent and effective approach across the bank.

You provide second-line oversight and challenge on how subsidiaries, client units and countries manage Third-Party & Outsourcing Risk. You take a broad view of their governance, risk profile and control environment and assess whether relevant policies, standards and regulatory requirements are effectively understood, implemented and embedded.

You will:

• Monitor and challenge the third-party and outsourcing risk profile of subsidiaries, client units and countries;
• Assess whether appropriate TP&OR governance, ownership, processes and controls are in place and operating effectively;
• Challenge the quality and completeness of risk assessments, management information, issue management and remediation;
• Assess the implementation and consistent application of group wide TP&OR policies, standards and frameworks;
• Advise and challenge stakeholders on regulatory expectations, including DORA and the EBA Guidelines on Outsourcing Arrangements;
• Identify common themes, dependencies and emerging risks across subsidiaries, client units and countries and translate these into clear risk opinions;
• Build effective relationships with local management, first-line functions and Risk Management while maintaining an independent second-line perspective;
• Consolidate insights and provide clear conclusions and recommendations to senior stakeholders.

You are a senior risk professional who combines sound judgement with constructive challenge. You are able to take a helicopter view of how subsidiaries, client units and countries manage third-party and outsourcing risk, while going into detail where needed. You understand that different entities operate in different business and regulatory environments and are able to distinguish material risks from noise. You communicate clearly, build effective relationships across organisational boundaries and maintain your second line perspective.

You have a university level degree and at least 10 years of relevant work experience, preferably with a background in IT audit or financial audit, complemented by experience in third-party risk, outsourcing risk, operational risk, IT risk or information security. Experience in an international financial institution and knowledge of DORA and the EBA Guidelines on Outsourcing Arrangements is preferred. You are comfortable operating in a developing area where frameworks, expectations and practices are still maturing. You are fluent in English; Dutch is an advantage & based in the Netherlands.