IT Risk Manager

You and your job
As a IT Risk Manager within the CRO domain, you play a key role by challenging, monitoring and evaluating our IT and security risks on an ongoing basis. These risks are now more important than ever and we are responsible to be on top of developments in this domain in order to fulfil our role as a trusted bank within society. As a bank we have to be permanently aware of the trust that is placed in us. That is why we have to be diligent with regard to protecting our core systems, communication channels and data.

Rabobank increasingly accelerates in working with start-ups and adopting new technologies like block chain, data-analytics and cloud. This transformation comes with challenging (but also exciting) topics related to Continuity and IT Risk, since our IT-landscape is more and more connected to e.g. external parties, cloud or mobile applications.

Imagine, that together with colleagues you’ll contribute to a Rabobank that’s more in control of its IT-risks and that you can provide strong, fact-based advice, to facilitate this transformation, based on your thorough, in-depth knowledge and sound experience with IT risk.

Practical Examples

• Report on IT risk themes for risk governing bodies, establishing an integrated risk view, together with other Compliance, Legal and Risk departments.

• Challenge your colleagues about security trends, developments and innovative technologies. Such as digitization of the processes of the bank, crypto currencies, sovereign identities, etc.

• Analyze the response on major IT related operational incidents related to cybercrime, such as DDos attacks, potential exploited vulnerabilities, security alerts, etc.

• Prepare a 2nd line opinion, together with risk, compliance & legal colleagues on new developments and/or challenges

• Regular interaction with MB-1 management with respect to the risk areas mentioned above, both in facilitating improvement of risk and control activities and in challenging decisions to be taken with respect to risk acceptance or control measures taken.

• Spot and initiate opportunities to improve the effectiveness of the team, to better manage and anticipate the challenges of today and tomorrow

Facts & Figures

• 43,822 Rabobank colleagues around the world

• 36-40 hours per week

Be a part of a 23 people strong Continuity & IT Risk community.

• Perform oversight on the IT risks within the bank. This by challenge, monitor and evaluate our risks in our IT-landscape on an ongoing basis.

• Conduct deep dives (investigations) and perform risk analyses related to technology, security, business continuity or third party risks.

• Develop and maintain policies and standards for the whole Rabobank Group related to technology, security, business continuity or third party risks.

Together we achieve more than alone
We believe in the power of difference. Bringing together people's differences is what makes us an even better bank. So we are very curious about what you can bring to our team at Continuity & IT-Risk Management.

 ‘The IT Risk Management team is an exciting team to be a part of. United by different nationalities, languages and experience, we are all able to bring something unique to the team. On a day-to-day basis there are plenty of opportunities to work on different projects and tasks, as well as ample support for continuous education.’

Julia, IT Risk Manager

The 23 people in Continuity & IT-Risk Management are responsible for 1) monitoring and overseeing of IT risks and IT related topics, such as Data, Outsourcing and BCM, 2) prepare, implement and monitor risk libraries (including policies & global standards), risk metrics. Working together is the way we work; as 1 team at Rabobank.

Talking of Rabobank:

We are a Dutch bank that operates in 38 countries for over 9,5000,000 customers. Together with these customers, our members and partners we stand side by side to create a world in which everyone has access to enough healthy food. In the Netherlands we work to create a country in which people are happy with how they live, work and do business.

You and your talent

• An Academic grade in Information Technology or other relevant subject with additional courses related to IT risk management (CISSP, CISM, CISA or RE certification is preferred).

• Additional experience and education/courses related to cyber security, cloud technology, cryptographic, business continuity, data management.

• More than 5 years of experience in different roles within Security, Risk Management, Audit or Information Technology in a complex organization, preferably in the financial sector.

• Demonstrable experience with the practical application of IT Risk Frameworks;

• In order to perform qualitative oversight, you are required to keep abreast of new IT developments, incl. innovations, such as AI, and keep your knowledge and experience at the right level, supported by Rabobank facilities.

• Proficient in the English language, both verbally as in writing, and proficiency in Dutch is a pre.

• Excellent team-player, easily co-operating with colleagues from different departments.

• Experience in agile way of working, working in sprints, having daily stand-ups, etc.