Information Security Expert

ABN AMRO Bank N.V.; Amstelveen; On-site; EUR 70,000 - 90,000; Full time

Benefits offered by this job

Attractive salary with flexible benefit budget

Excellent pension scheme

Room for personal development

Five weeks vacation plus extra days off

Annual public transport pass

Job summary

ABN AMRO Bank N.V. in Amstelveen is seeking an Information Security Expert to enhance vendor security through effective risk assessments and management. The role requires strong stakeholder management and a deep understanding of security processes within supply chains.

You will collaborate with various stakeholders and ensure effective risk management throughout vendor relationships. Benefits include a competitive salary, flexible working arrangements, and generous vacation policies.

Qualifications

• 5+ years of experience in supply chain security projects.
• 5+ years executing information security risk assessments.
• Knowledgeable in security processes and technology architectures.

Responsibilities

• Manage and report on vendor security performance.
• Conduct Vendor Security Risk Assessments.
• Ensure effective management of security risks with vendors.
• Review assurance reports from third parties.
• Collaborate with legal and procurement on security-related contracts.

Skills

Supply Chain Security

Information Security Risk Assessments

Stakeholder Management

Vulnerability Management

Education

5+ years in a relevant field

Job description

At a glance

You can imagine that security is a major asset within the bank. We're looking for an Information Security Expert who wants to play an important role in making sure that our 3rd parties don’t impact ABN AMRO. You will be responsible to manage, monitor and report on the performance and the status of the security posture of our vendors and improve our service. A challenging role for someone who likes to dive into complex processes and is good in cooperation and stakeholder management to work together to keep our vendor portfolio safe. Sounds interesting? Please read further and apply online!

Your job

What does your working day look like?

• The team works according to the DevOps & Agile methodology.
• You are working on improving the Supply Chain Security services, based on user stories.
• Occasionally there are incidents that occur that you are going to look into.
• For your work you often engage with various stakeholders such as other IT departments, business colleagues and software suppliers.

Key responsibilities in your work contain:

• Govern and manage IT vendor relationships in terms of performance regarding the security aspects of the underlying contractual obligations;
• Execute Vendor Security Risk Assessments and perform follow up actions. Focus on the risks that matter, translate them into the business context and help your stakeholders to address security challenges;
• Ensure that information security risks are identified and managed effectively throughout all the stages of the relationship with external vendors;
• Review the applicability and the quality level of assurance reports issued by the third parties;
• Ensure continuous improvements are achieved both in the quality of reporting and service provided by the third party;
• Manage the IT security related part of a contract with the third party provider. Work together with functions such as legal, risk, procurement on contractual changes;
• Help solving security-related questions, take initiative and escalated in time if needed;
• Signal improvements related to the way of working inside the team and contribute to improving the excellence of our service offering;
• Stay up-to-date with emerging cybersecurity trends and the latest developments in the field of technology, information risk and threats, actively share this knowledge with your colleagues and help to determine if/when to integrate them into the assessment program.

Working environment

You will join the Supply Chain Security (SCS) team, part of the Corporate Information Security Office (CISO) department, within the Cyber Defence grid. CISO is responsible for the bank's information security globally, across all subsidiaries and countries. The grid Cyber Defence is responsible for the security operations activities of ABN AMRO, and within our team we continuously provide visibility into the security posture of the vendors of ABN AMRO. The Supply Chain Security team members are experienced in information security and vendor relations.

The SCS team currently consists of 20 members with different nationalities and is ready for further expansion. The working language within the team is English.

Your profile

You're a hands‑on, self‑organized teamplayer who's willing to finish and deliver. You describe yourself as a service‑oriented professional, you enjoy taking on an internal consultancy role and are able to manage stakeholders naturally. On top you have a strong ability to translate technical risks into business risks and vice versa. To be successful in this position you must recognize yourself in the following requirements:

• 5+ years of experience with setting up projects & deliverabilities within supply chain security / TPSRM
• 5+ years of experience with executing information security risk assessments;
• Knowledgeable on one or more areas such as security processes, technology architectures, network security, application security and vulnerability management.

We are offering

We believe it is important to be a good employer. Joining us means stepping into a role with impact, supported by excellent employment conditions that foster your job satisfaction, development, and wellbeing.

In addition, we offer:

• An attractive gross monthly salary based on a 36 hour work week, including holiday allowance and a flexible benefit budget. Depending on your experience and skills this role will be in Hay level 11 or 10.
• An excellent pension scheme, ensuring that you are well prepared for the future.
• Flexibility in working: working from home is possible in consultation with your team and depending on your role. We will provide an ergonomic home office setup for you.
• Plenty of room for relaxation with five weeks of vacation per year, supplemented by two mandatory days off. You can also purchase up to four additional weeks of vacation annually.
• Five "Banking for better days": extra days off that you can use for personal development or volunteer work.
• Personal development is key: you receive a development budget of EUR 1,000 per year, which can accumulate up to EUR 3,000.
• An annual public transport pass with free public transportation throughout the Netherlands for both business and private use.

You can find more information about our employment conditions and salary scales in our Collective Labour Agreement (CLA), which applies to this vacancy.

Interested?

Are you interested? Please apply. We look forward getting to know you.

Your Future: Inclusive, Innovative, Sustainable

At ABN AMRO, we believe in "Banking for better, for generations to come." Equal opportunities for everyone are a crucial foundation, as we strive for an inclusive culture where all employees feel seen, heard, and valued. Our vision of being a personal bank in the digital age aligns perfectly with the demand for surprising insights and innovative solutions, born from a diverse interplay of cultures and experiences. We focus on customer experience, sustainability, and building a future‑proof bank, conducting annual reviews to ensure equal pay for equal work. Join a bank that embraces ingenuity and ambition, and make an impact with us for a better future.

If you want to apply for the B-Able or Reboot program, make sure to mention it both in the title and the content of your resume.

Disclaimer external recruitment agencies

External recruitment agencies need to have a signed agreement with ABN AMRO BANK N.V., executed by a Talent Acquisition Specialist, when submitting a resume to a vacancy. No unsolicited services or offers, please.