Risk Manager Third-Party & Outsourcing Risk

Shape resilience beyond our own boundaries
ABN AMRO increasingly depends on external providers and outsourced services. These relationships enable secure, stable and innovative banking services, but also introduce risks that must be identified, assessed and managed effectively.
Within Risk Management, CRO IT & Cyber provides second line oversight of third-party and outsourcing risk. The Third Party & Outsourcing Risk team challenges how risks related to external providers are managed across the bank.
Working environment
ABN AMRO works with the three lines of defence model. Within Risk Management, the CRO IT & Cyber function provides 2nd line oversight of IT risk, information security, cyber security, and outsourcing risk. With this role, that scope expands to digital and operational resilience risk. We provide independent challenge and guidance to the 1st line, focusing on the risks that matter most and on emerging threats.
We are offering
We offer a role in a newly created team with a clear strategic purpose. You will have the opportunity to make a tangible contribution to a topic that is high on the agenda of the bank, regulators and society. You will work on topics that are relevant, complex and visible. You will collaborate with colleagues across risk, technology, data, security and the business, and you will help build a practice that supports responsible innovation.
Solliciteer nu via de knop hieronder en maak impact bij ABN AMRO.
Belangrijkste verantwoordelijkheden

• Review and challenge third-party risk assessments, control frameworks and mitigation plans
• Prepare and perform assessments at vendor locations (both virtual and on site)
• Interview vendor representatives and assess documentation, evidence and operational practices
• Evaluate the design and operating effectiveness of controls
• Reporting findings to contract owners and managers
• Assess outsourcing arrangements and risks involving critical and important suppliers
• Advise stakeholders on DORA and outsourcing requirements
• Identify trends and translate complex information into clear risk opinions and management reporting

Vereisten

• University level degree
• At least 10 years of relevant work experience, preferably with a background in IT audit or financial audit
• Experience in third-party risk, outsourcing risk, operational risk, IT risk or information security
• Understanding of risk assessments, control design and operating effectiveness
• Fluent in English; Dutch is an advantage
• Based in the Netherlands