Information Risk & Security Officer

Depending on relevant knowledge and experience, we offer you a gross salary between the [amount] based on full-time employment and great employment conditions focused on flexibility, such as:

• A guaranteed year-end bonus of 8.33%.
• Much attention to your vitality and personal development.
• The possibility to work from home 2 to 3 days a week.
• And, of course, a well-regulated pension.

Are you ready to make an impact on IT risk management within the pension sector?

At APG Shared IT Services, as an Operational Risk Officer, you will get the chance to apply your expertise for a socially relevant organization. You will work in a dynamic IT environment where risk management truly makes a difference. Together with a dedicated team, you will shape the future of IT risk management, perform in-depth analyses, and advise management on strategic choices. Do you want to contribute to a secure and reliable digital infrastructure for millions of pension beneficiaries? Then this is your next step.

Job Description

As an Operational Risk Officer, you play a key role in further professionalizing IT risk management within APG Shared IT Services (SIS). Together with a team of 9 colleagues, you will guide the organization in identifying, analyzing, and controlling operational and strategic risks. You will report on this to management and actively contribute to increasing risk awareness within SIS.

Because APG is active in the pension sector, we encounter unique risks that require customized risk management. In addition to risk management, you will also conduct investigations into incidents and work preventively to avoid them. Furthermore, you are an important link in internal control and external accountability towards, among others, DNB, ISAE, Swift, DigiD, CSA, and ISO27001.

This is what you will do

In this role, you are an advisor and sparring partner for SIS management and other stakeholders. Your responsibilities include:

• Translating 2nd-line risk & security policy into IT procedures and standards.
• Advising IT teams on risk management in their daily work and projects.
• Reporting and advising on risks, internal control, and specialist investigations.
• Maintaining and improving the SIS IT control framework.
• Increasing risk awareness and stimulating risk-driven decision-making.
• Drafting and presenting risk reports within APG.
• Coordinating testing activities (incl. assurance reports) and acting as a point of contact for teams and accountants.
• Periodic risk assessment at MT level.
• Registering incidents, performing root cause analyses, and reporting.
• Performing risk assessments at team, project, product, and process levels.

You are analytically strong, think logically and abstractly, and know how to translate policy into practice. You are extroverted, persuasive, and work well in collaboration, but can also operate independently. Integrity and reliability are a matter of course for you.

For pension provider APG, pensions are about people, life, and living together. Through careful asset management, pension administration, communication, and advice, we work on a livable future for current and future generations. In which we share prosperity and well-being fairly and sustainably. Now, soon, and later.

APG is committed to about 4.5 million people in the Netherlands. That is why we find it important to also be a reflection of Dutch society. That means APG strives for an inclusive working environment, in which everyone can be themselves and in which your unique qualities are embraced.

If you choose to work at APG, you choose a job in which you contribute to a beautiful future. Apply now!

Please contact Fleur Van Lier - Weekers via +31623382719 fleur.weekers@apg.nl or Roxandra Stapelvoort-Janssens via roxandra.stapelvoortjanssens@apg.nl who can tell you more about the content of the position.

Do you see a future at APG? Apply no later than - and show yourself to us.

A Pre-Employment Screening is part of the procedure. An assessment may be part of the procedure.