Retail Risk Analyst
What does it mean for our supervision if AI determines the prices of financial products? How do we recognize financial vulnerability to take action in a timely manner?
Jobs in the Netherlands, in English.
26,000+ live jobsHybrid in Amsterdam·Full-time·Added 2 months ago (last checked 21 Oct)
16 open roles





This job advert was originally written in Dutch.
⭐ A completed bachelor's or master's degree in the field of (administrative) information science, (technical) business administration, or a comparable (STEM) degree;
⭐ At least 5 years of relevant work experience within the financial sector, technology sector, (IT) audit, or a similar environment;
⭐ Knowledge of or affinity with crypto-asset services, MiCAR, and DORA;
⭐ Experience with IT risk management and frameworks such as ISO 27002, COBIT, and/or NIST;
⭐ Certifications such as CISSP, CISM, CISA, or similar are a plus;
⭐ Analytically strong: you fathom complex files and distinguish main points from secondary details;
⭐ Ownership: you take responsibility and work proactively;
⭐ Collaboration: you actively seek cooperation, share knowledge, and contribute to a positive team result;
⭐ Communicative: excellent command of the Dutch and English languages, both orally and in writing.
📄 You will start with a one-year contract with a view to permanent employment
💰 Classification in scale G, depending on knowledge and experience, you will receive a gross annual salary between €60,000 and €100,000 (36 hours, incl. 13th month and holiday allowance)
⏰ 36-hour work week, working days in consultation (e.g., 4x9)
🌴 199.5 vacation hours per year for a 36-hour work week (in addition to your standard roster-free day)
💻 A laptop and a smartphone
📚 Extensive training and education opportunities
🚆 Full reimbursement of public transport costs (2nd class)
🏡 Home office allowance for work-from-home days
💪 Contribution to a gym membership
🚲 Attractive secondary employment conditions such as a bicycle and device scheme and an allowance for your home workspace
As Cybersecurity Crypto Supervisor, you will support the AFM in supervising crypto-asset service providers falling under the Markets in Crypto Assets Regulation (MiCAR). You will assess the digital resilience of organizations and oversee compliance with the Digital Operational Resilience Act (DORA). In doing so, you will combine knowledge of laws and regulations with insight into IT risk management, cybersecurity, and the technical functioning of crypto services. You will operate in a dynamic and rapidly evolving market where innovation, supervision, and societal impact converge.
Assessing IT aspects within MiCAR license applications.
(European) investigations into the IT risk management of crypto-asset service providers with a MiCAR license.
Analyzing IT risk management processes, cybersecurity measures, and operational resilience, and determining necessary follow-up actions.
Analyzing IT incidents, resilience testing, and outsourcing risks.
Maintaining contact with internal and external stakeholders regarding risks, findings, and supervisory measures.
For questions about the vacancy, please contact Lauren Loozeman (recruiter) via lauren.loozeman@afm.nl or
0622781448.
You will be part of the team responsible for the supervision of operational IT and will work very closely with the team responsible for the supervision of crypto-asset services. Within these rapidly evolving supervisory domains, you will collaborate with specialists in the fields of supervision, crypto, cybersecurity, and laws and regulations to contribute to a resilient and integral financial sector.