Senior IT Risk Manager

At a glance

International Card Services (ICS) is a 100% subsidiary of ABN AMRO Bank N.V. with its own bank license. ICS is a payment service provider and market leader in issuing credit cards in the Netherlands. We have been issuing, promoting, administering, and processing payments of Visa and Mastercard credit cards for over 30 years. ICS issues credit cards both under its own brand and in conjunction with co-branding partners, for both Consumer and Commercial clients.

Are you an experienced IT risk professional who can provide independent challenge in a major transformation environment? Do you combine strong risk expertise with a pragmatic, delivery-focused mindset? Then this role could be for you.

Your job

As Senior IT Risk Manager, you are responsible for providing independent second-line oversight, challenge and advice on technology-related risks across the organisation.

You proactively identify, assess, challenge and monitor risks associated with technology, cybersecurity, operational resilience, outsourcing, cloud services, data management and technology change. You act as a trusted risk advisor to senior stakeholders while maintaining an independent second-line perspective.

You contribute to the further professionalisation of the IT Risk function by strengthening the IT Risk Management framework, improving ways of working and supporting compliance with relevant regulatory and industry requirements.

You will report directly to the Head of IT Risk.

Working environment

Our purpose is Carefree Payments. Our mission is to offer customers and partners relevant, sustainable and secure payment products. This purpose is at the heart of our activities and is a key reason to choose ICS.

Our credit cards can be used worldwide to pay at more than 46 million addresses and in any currency. In the Benelux there are now about 2.7 million people with a credit card issued by ICS. Our customers not only pay carefree, but also with extra security: their purchases are insured, and we guarantee delivery.

Reliability, security and carefree payment go hand in hand. We make payments simple, secure and reliable for our customers and partners. In this way, we contribute to a safer society and strengthen confidence in financial institutions.

The culture within ICS can be described as family-oriented, helpful, people-oriented, and service oriented. Our core values are: 
•    Courage 
•    Care 
•    Collaboration 

Your Responsibilities 

•    Contribute to the development, maintenance and continuous improvement of the IT Risk Management framework, policies, standards and methodologies in alignment with regulatory requirements and industry best practices.
•    Oversee and challenge the quality of IT risk assessments, control assessments, vulnerability management outcomes and remediation plans, ensuring appropriate risk ownership, mitigation and follow-up.
•    Provide clear second-line risk opinions, challenge and recommendations on IT, cyber, operational resilience, outsourcing and data-related risk topics to senior management and relevant committees.
•    Provide independent second-line oversight and challenge on major transformation, outsourcing and technology change initiatives, ensuring risks are identified, assessed, mitigated and escalated where needed.
•    Prepare and present risk reports, trend analyses, key risk indicators and management insights on ICS's technology risk posture to senior leadership, relevant committees and, where applicable, regulatory stakeholders.
•    Build strong relationships with senior stakeholders across IT, business, compliance, security and group risk functions, while maintaining an independent second-line perspective.
•    Monitor emerging technology, cyber and regulatory developments and translate them into relevant risk insights, challenge and improvements to the IT Risk framework.
•    Drive continuous improvement of IT Risk Management processes, ways of working, reporting and governance, with the aim of increasing consistency, efficiency and second-line impact.
•    Closely cooperate with IT Risk colleagues at group level to ensure alignment, consistency and effective knowledge sharing.

Your profile

You are an experienced IT risk professional who combines independent oversight with a pragmatic, delivery-focused approach. You challenge where needed, engage where necessary and take responsibility for driving high-quality risk input and follow-up.

You bring:
•    Significant experience in IT & Cyber and third-party risk management.
•    Master's degree in Information Security, Computer Science or a related field, or equivalent professional experience.
•    Ideally around 10 years of experience in information risk management or EDP audit, preferably in the banking or financial services (consulting) industry.
•    Professional certifications such as RE, CISSP, CISA, or CRISC.
•    Experience with interpreting external regulations in the area of information security, technology risk and data management.
•    Strong knowledge of cybersecurity frameworks and relevant regulations, such as DORA, GDPR, PSD2, PCI-DSS and ISO 27001.
•    Proven ability to analyse complex information security issues, develop actionable plans, and drive results.
•    Experience in enhancing IT Risk awareness and providing training in the IT Risk Management domain.
•    Excellent communication and collaboration skills, with the ability to engage effectively with senior stakeholders across teams and departments.

We are offering

We believe it is important to be a good employer. Joining us means stepping into a role with impact, supported by excellent employment conditions that foster your job satisfaction, development, and wellbeing.

In addition, we offer:

• An attractive gross monthly salary based on a 36-hour work week, including holiday allowanceand a flexible benefit budget.
• An excellent pension scheme, ensuring that you are well prepared for the future.
• Flexibility in working: working from home is possible in consultation with your team and depending on your role. We will provide an ergonomic home office setup for you.
• Plenty of room for relaxation with five weeks of vacation per year, supplemented by two mandatory days off. You can also purchase up to four additional weeks of vacation annually.
• Five “Banking for better days”: extra days off that you can use for personal development or volunteer work.
• Personal development is key: you receive a development budget of €1,000 per year, which can accumulate up to €3,000.
• An annual public transport pass with free public transportation throughout the Netherlands for both business and private use.

You can find more information about our employment conditions and salary scales in our Collective Labour Agreement (CLA), which applies to this vacancy.

Interested?

For more information, contact Werner Hoppenbrouwers (Head of IT Risk) via werner.hoppenbrouwers@icscards.nl or apply directly.

Your Future: Inclusive, Innovative, Sustainable

At ABN AMRO, we believe in "Banking for better, for generations to come." Equal opportunities for everyone are a crucial foundation, as we strive for an inclusive culture where all employees feel seen, heard, and valued. Our vision of being a personal bank in the digital age aligns perfectly with the demand for surprising insights and innovative solutions, born from a diverse interplay of cultures and experiences. We focus on customer experience, sustainability, and building a future-proof bank, conducting annual reviews to ensure equal pay for equal work. Join a bank that embraces ingenuity and ambition, and make an impact with us for a better future.

If you want to apply for the B-Able or Reboot program, make sure to mention it both in the title and the content of your resume.

Disclaimer external recruitment agencies

External recruitment agencies need to have a signed agreement with ABN AMRO BANK N.V., executed by a Talent Acquisition Specialist, when submitting a resume to a vacancy. No unsolicited services or offers, please.

Use of AI in our application process

You’re welcome to use AI to help write your CV or cover letter, as long as it reflects your own story. We review every application personally and without AI. During interviews, real time AI tools may not be used. With your permission, interviews can be recorded and supported by AI. This helps us keep the process fair, careful, and transparent.