IT Compliance Consultant

What do you need for this position?
Passion, drive, and curiosity are more important than knowledge of regulatory frameworks; however, here is a list of what would make a good IT Compliance Consultant at Projective Group:

• A higher degree (HBO/WO+);
• At least 3 years of experience as an Information Security Officer, IT Risk Officer, or consultant, IT Auditor, or similar role;
• Supplemented with relevant courses and certifications in IT security and/or risk management (for example, CISA, CRISC, CISM, or CISSP);
• Demonstrable knowledge of market standards such as ISO27001/2, Cobit, ITIL;
• A passion for sharing knowledge and helping organizations reach a higher level of information security management;
• Fluent in the Dutch and English languages, both written and spoken.

• Experience in a financially regulated environment;
• Knowledge and experience with IT-related regulatory frameworks (such as best practices and guidelines from EBA, ESMA, AFM, and DNB).
• Knowledge of AI Act, AI Governance, or AI risk assessments.

• A competitive salary and company bonus;
• Collaboration with expert project and program managers who support your development;
• No micromanagement, no office politics; we have a flat structure with self-managing teams within it;
• Excellent secondary employment conditions, including a substantial training budget, pension, and social events;
• Opportunities to develop new skills and advance your career;
• Travel expenses (Lease car, mileage allowance, or NS-Business card);
• IT budget for your hardware;
• A healthy work-life balance with a mix of working in the office and from home;
• Modern office in Amsterdam.

Are you the Information Security Officer, IT Risk Officer, or IT Auditor who is ready to take your expertise to the next level and make a significant impact for clients across various organizations?

Welcome to Projective Group! We are a leading consultancy firm focused on strategy execution for financial institutions, where innovation and technology meet business transformation. Through our deep knowledge and targeted solutions in Data, Legal Risk & Compliance, Pensions & Insurance, Payments, Transformation, and Talent, we develop groundbreaking solutions for our clients.

We are looking for an expert in the field of IT risks and information security who wants to help organizations in the financial sector reach the next level of maturity. We have openings from junior to senior positions within our IT Compliance Team!

What will you do?
As an IT Compliance Consultant at Projective Group, you will use your expertise to help financially regulated entities stay 'in control' of IT risks, IT security, (cloud) outsourcing, and cybercrime. In addition to the market standards you are familiar with, there are legal frameworks for all these topics, such as EBA/ESMA guidelines and the Digital Operational Resilience Act ("DORA"), which your clients must comply with. You are able to translate these frameworks and requirements into concrete, pragmatic solutions for our clients to ensure demonstrable compliance. This may be part of a license application to DNB/AFM, new IT-related legislation coming into force, follow-up on an inspection or investigation by a supervisory authority, or simply providing ongoing expertise that is not available within the client's company.

How we work
Within Projective Group, you will work as a consultant with a high degree of autonomy and ownership. You know how to recognize and leverage commercial opportunities, for example, by actively engaging in conversation with existing and new clients. You plan and manage your own schedule, organize your activities efficiently, and proactively coordinate with the client where necessary to keep expectations clear. This freedom requires responsibility, but simultaneously offers you the space to let your expertise fully shine and to shape your role in your own way.

What kind of projects will you work on?

• Performing gap analyses and advising on how the gaps can best be addressed regarding legal frameworks such as DORA;
• Facilitating risk analyses;
• Assisting in the drafting of policies and procedures that comply with legal requirements;
• Providing training/workshops on topics such as cybersecurity awareness;
• Reviewing policies and procedures;
• Supporting the design of IT Risk and Control Frameworks;
• Assessing certifications/audits performed by third parties for clients.