Business Risk Manager IT

• You will deal with risks in the areas of information provision, information security, cybersecurity, IT outsourcing, IT and business continuity, and IT projects.
• You will support the implementation of laws and regulations, such as DORA, NIST, and EIOPA.
• From a first-line risk management role, you will provide support to the IT department in carrying out its ICT risk management.
• You will support and advise on conducting risk assessments and designing controls to mitigate risks.
• You will incorporate these controls into the IT Internal Control Framework.
• You will work closely with policy owners for demonstrable documentation regarding effective operation.
• You are part of a 3-lines model and therefore work closely with other departments such as Control Testing, Compliance, and second-line Risk Management to ensure that our systems, processes, and services meet the highest standards of safety, reliability, and compliance.
• You are also a point of contact and responsible for coordinating external audits in the IT domain.
• You help colleagues in your team and regularly spar to keep each other sharp.

Responsibilities.

• Drawing up, implementing, and monitoring the IT risk management policy and framework.
• Identifying and analyzing operational risks within IT processes and projects.
• Performing risk assessments and formulating mitigating measures.
• Maintaining the IT Control Framework.
• Monitoring and reporting IT risks to senior management and relevant stakeholders.
• Supporting audits and complying with laws and regulations such as DORA and other standards.
• Monitoring the follow-up of findings resulting from performed control tests.
• Performing assessments of third-party ICT service providers.
• Collaborating with various stakeholders such as compliance, audit, and second-line risk management.
• Helping to raise awareness of IT risks within the organization.

The team.

• You will work within a 'Regie' team, which is part of the CIO department.
• Risk Management is a fascinating field where you deal with many different disciplines and components within the IT organization and interact at all levels.

• Proactive, driven professional in the field of IT Risk Management.
• Customer and quality-oriented attitude to collaborate on secure products and services.
• Completed bachelor's or master's degree, preferably in a relevant field (e.g., IT, Business Administration, Risk Management).
• Demonstrable experience in a comparable first or second-line function.
• Knowledge of risk management.
• Substantive knowledge of the IT field, security, COBIT control framework, DNB Good Practice Information Security, and DORA.
• Experience in (further) developing, implementing, and maintaining policy, framework, and processes within risk management.
• Excellent advisory and communication skills (verbal and written) and able to increase risk awareness.
• Experience with tools for risk management and data analysis.
• Excellent communication skills, both in Dutch and English.
• Certifications such as CISM, CRISC, or similar are a plus.
• Technical knowledge in the field of IT infrastructure and IT setup is a plus.

• An independent, challenging position with ample room for personal initiative in a professional work environment.
• Excellent primary and secondary employment conditions.
• An Individual Choice Budget of 16.33% on top of your gross salary.
• Premium-free pension.
• A one-year contract with the prospect of a permanent contract.
• Access to an academy for personal and professional development.
• Discounts at many gyms to encourage exercise and fitness.