IT Risk Manager / Special Framework Expert

You and your job

Imagine a position where your day-to-day efforts directly influence the security and innovation of financial services, where collaboration with a team of dedicated professionals is not just encouraged but essential to our collective success.

At Rabobank, we understand that to stay ahead, we must continuously evolve, and it's here, within the vibrant corridors of CITO, that your unique skills in Risk and control assessment, collaboration with cross functional teams, determining level of compliancy with internal and external regulatory requirements, will ignite a path of improvement and efficiency. You'll have the distinctive opportunity to contribute in our risk governance, turning complex challenges into streamlined, actionable plans. Your role is critical—guiding colleagues, aligning and coordinating with stakeholders, and ensuring that each step we take is measured, impactful, and leads us toward our ambitious goals.

We're not just offering a job; we're inviting you to be part of a movement—a chance to leave your mark in a leading global bank committed to innovation and excellence. If you're ready to push boundaries, to lead with courage, and to make a tangible impact, then your journey with Rabobank's CITO begins now. Dive into a role where your contribution is valued, your vision is sought after, and your career can soar to new heights.

Responsibilities

In your role as IT risk Manager for Specialty in IT Service Assurance, you focus on preparing and taking care of the Risk & Control process for special themes such as Sox compliancy, SWIFT and IT Service assurance Management. You do this by, among other things:

• Contributing to the audit trail activities and crafting a hygiene check for their implementation is a key aspect of the role.
• Maintaining a focus on the progress and ensuring the timely delivery of In control activities and deliverables are fundamental responsibilities.
• Including and valuing the input of relevant stakeholders in the In control activities, while also ensuring proper alignment with different themes and timeliness.
• Assess IT risks, controls and effectiveness of controls Execution of the annual control cycle including validation of performed controls.
• Ability in performing required impact analysis and oversee the overall effect to the frameworks reporting activities.
• Performing control assessments both design and operating effectiveness for various In control themes that includes but not limited to Identity and access management, change management, business continuity, vulnerability management, Incident management, outsourcing assurance and business continuity management.
• Experience in Identity and Access management control testing for processes such as role management, authorization management, system provisioning and privileged access management.
• Enter into a dialog, challenge and collaborate with stakeholders, such as risk managers, auditors, process owners, IT leads and or Business Owners.
• Continuously improvement of yourself and the team, by creating awareness, dare to change and dare to simplify and raising the overall quality level of the team’s deliverables.
• Contribute to the continuous improvement of the compliancy of the Frameworks.

You and your talent

• Security Standards Expertise: Demonstrated strong skills in SOC1, SOC2, ISAE 3402,COBiT, ISO 27001 reporting activities, with a proven track record of auditing expertise in risk and control, ideally within technology-driven environments.
• Organizational Acumen: A good understanding of complex organizations, with the ability to navigate and influence the multifaceted dynamics of a global bank like Rabobank, particularly within its Chief Innovation and Technology Office.
• Stakeholder Engagement: Excellent stakeholder management skills, with an expertise in aligning various stakeholder needs and integrating their input into effective In control activities, ensuring successful outcomes.
• Strategic Problem-Solving: Possess excellent problem-solving skills, capable of identifying challenges within risk governance and creating innovative, actionable solutions that drive organizational improvement.
• Project Coordination Proficiency: Strong capability in coordinating the execution of Risk and Control activities from planning through to delivery, ensuring IT General controls testing cycles are completed on time and meet defined objectives.
• Innovative Thinking: Ability to contribute creatively to the control design and operational testing activities, bringing forward-thinking ideas to enhance risk management practices.
• Collaborative Leadership: Demonstrated ability to work collaboratively with colleagues and teams, providing support and coordination in the implementation of their plans, underpinning the success of risk governance improvements.
• Result-Oriented Approach: A focus on monitoring progress and delivering In control assessment and reporting activities, with an emphasis on achieving results and ensuring the effective alignment of Frameworks outcomes with organizational goals.