Retail Risk Analyst
What does it mean for our supervision if AI determines the prices of financial products? How do we recognize financial vulnerability to take action in a timely manner?
Jobs in the Netherlands, in English.
26,000+ live jobsHybrid in Amsterdam·Full-time·Added 1 month ago (last checked 21 Oct)
16 open roles





Nice to have
This job advert was originally written in Dutch.
⭐Completed university degree (WO): for example in the field of cybersecurity, information management, or IT Audit.
⭐ Work experience: at least 4 years of relevant work experience through which you can properly assess IT risks. For example, in the field of IT (Audit), cybersecurity, risk, compliance, or a related position.
⭐ Knowledge of and experience with standards, frameworks and legislation in the field of IT risk management and information security, such as DORA, ISO 27001 and COBIT. A RE or CISA certification is a plus.
⭐ Analytical thinking: you quickly grasp complex files and know how to distinguish main issues from side issues
⭐ Results-oriented: you focus on achieving goals and ensure that your work delivers the desired result
⭐ Powers of persuasion: you are a strong discussion partner and communicate clearly, both verbally and in writing
⭐ Ownership: you take responsibility for your activities and ensure proactive execution
📄 You will start with a one-year contract with a view to permanent employment
💰 Salary placement in scale G; depending on your knowledge and experience, you will receive a gross annual salary between €65,000 and €106,000 (36 hours, incl. 13th month and holiday allowance)
⏰ 36-hour work week, working days in consultation (e.g., 4x9)
🌴 199.5 vacation hours per year (on top of your standard roster-free day)
💻 A laptop and a smartphone
📚 Extensive training and education opportunities
🚆 Full reimbursement of public transport costs (2nd class)
🏡 Home office allowance for work-from-home days
💪 Contribution to a gym membership
🚲 Attractive secondary employment conditions such as a bicycle and device scheme and an allowance for your home workspace
The Dutch asset management sector is large and complex: more than 300 institutions together manage approximately €2,000 billion. IT systems play a crucial role in the management of these assets. Due to rapid digitalization and the scale of the sector, institutions are increasingly dependent on well-functioning IT systems and exposed to risks, such as cyber threats. Therefore, it is important that they manage their IT risks well. Since 2025, the European Digital Operational Resilience Act (DORA) therefore imposes important requirements on the IT processes and internal controls of asset managers.
In this role, you will assess whether asset managers meet these requirements. Are their IT processes well-designed and is their risk management in order? You will work on complex files in which unambiguous answers do not always exist and careful considerations are required. In doing so, you will work closely with experts within your team and the department, use data to make risks transparent, and discuss your findings with asset managers. In this way, you translate complex IT risks into concrete insights and contribute to a resilient and future-proof sector.
Supervising compliance with DORA and conducting investigations based on trends, signals, and supervisory strategy.
Assessing IT processes, internal control, and risk management.
Conducting supervisory meetings with asset managers.
Identifying (new) IT risks and technological developments that impact asset managers.
Collaborating with colleagues from different disciplines and contributing to the further development of supervision.
For questions about the vacancy, please contact Jay Oemardien via jay.oemardien@afm.nl or 06 46 81 13 67.
You will work within the Asset Management department (approximately 60 employees) and form part of the Ongoing Supervision team, which consists of about twenty colleagues. This team investigates, among other things, whether asset managers comply with laws and regulations and ensures that new rules are properly implemented. During IT investigations, you will often work together with other colleagues specializing in IT audit or cybersecurity. You will also work with supervisors with other specialisms within or outside the department. Additionally, you will regularly have contact with external institutions such as DNB, European supervisors, industry associations, and the Ministry of Finance.