IT Risk Expert (1st line)

Rabobank; Utrecht; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Personal development budget

Hybrid working environment

Good work-life balance

Job summary

Rabobank is seeking an IT Risk Expert (1st line) to lead IT risk and control activities within the General IT Controls (GITC) lifecycle. You will partner with a network of professionals, including external auditors and regions beyond the Netherlands, to strengthen control design, testing, and framework integration.

The role emphasizes advisory expertise, proactive risk management, and a collaborative environment within Rabobank's CITO office, supporting secure, compliant IT operations across the

Qualifications

• 10+ years in IT audit or IT assurance with focus on risk and control.
• Strong knowledge of GITC frameworks and IT risk management.
• Experience collaborating withExternal Auditors and regions outside the Netherlands.

Responsibilities

• Act as first contact on IT Assurance and as a consultant in first line IT.
• Advise on improving IT risk and control processes and ensuring compliance.
• Engage stakeholders and translate input into standards and actionable requirements.
• Identify and address IT risk-related issues, driving improvements autonomously.

Skills

IT risk

GITC

IT audit

SOX

COBIT

Education

IT auditing/assurance experience (10+ years)

Tools

SOX framework

COBIT

ISO 27000

ISAE 3402/SOC reports

Job description

Embark on a transformative journey with our team as an IT Risk Expert (1st line), where your expertise is crucial in our IT risk & control frameworks. In this pivotal role, you're not just a subject matter expert; you're a consultant, an advisor, and a team player, crafting and leading the activities that redefine how we manage IT risk and control.

You and your job

Imagine a position where your day-to-day efforts directly influence the 1st line risk management activities of Rabobank's IT department, where collaboration with a team of dedicated professionals is not just encouraged but essential to our collective success.

You are part of a team whose mandate is to oversee the General IT Controls (GITC) lifecycle, align stakeholders including External Auditors and specifically also the Regions outside of the Netherlands, and drive continuous improvement across risk control execution, without owning risks or controls. By embedding and coordinating consistent execution, automation and quality oversight you ensure the control structure can adapt and scale in response to new regulatory demands.

In order to achieve our strategic ambitions we are looking to expand the team with an IT Risk Expert.

Practical Examples

• Coordination of IT assurance framework testing – eg SoX, Swift, DGS, but also internal global assurance exercises - and be first point of contact for External Auditor and the Regions outside of the Netherlands.
• Define and enforce standards for GITC control design, control implementation and control testing as well as control framework integration.
• Prioritize finding management based on reporting.
• Drive innovation and automation in GITC.

Key responsibilities

• IT Assurance and Consultancy: Act as first contact on IT Assurance and as a consultant within first line IT, providing expert guidance on risk management and control testing.
• In-depth Knowledge of IT Risk with focus on GITC: Utilize your extensive knowledge of IT risk management to advise on improving risk and control processes and ensuring compliance.
• Stakeholder Management: Engage with stakeholders across various levels of the organization, translating their input into standards and actionable requirements.
• Proactive and Autonomous Work: Take initiative in identifying and addressing IT risk-related issues, working autonomously to drive improvements and efficiencies.

Within Rabobank's CITO (Chief Innovation & Technology Office), there’s a community with over 150 first-line risk & control colleagues. You'll join the Control Office, a team of ca. 30 professionals dedicated to IT risk and control management whose purpose it is to strengthen, simplify, and safeguard the control environment for innovation and technology to enable secure, seamless banking anytime, anywhere. We act as a central hub, connecting various IT divisions and ensuring the alignment of IT activities with overarching risk and compliance policies.

The Control Office is the crucial link between IT, the business, and external stakeholders, including regulators like the ECB. This involves not only monitoring and reporting but also proactive risk management and guiding the organization through regulatory compliance. We foster a collaborative and supportive environment, characterized by open communication and a shared commitment to excellence. Our team values both professional expertise and a friendly, approachable work atmosphere.

Together we achieve more than alone

The 30 people at CITO Control Office support the domain in establishing a risk governance structure that ensures senior management can steer on the right priorities to keep a healthy risk profile and be in control. Working together is the way we work; as 1 results-driven team at Rabobank.

Work on yourself & the world around you

You will benefit from a personal development budget, a hybrid working environment, and a good work-life balance.

You and your talent

• Experience: 10+ years in an IT audit or IT Assurance function, continuously seeking and implementing improvements with a proven track record in risk and control within technology-driven environments.
• Stakeholder Engagement: Skilled in engaging with stakeholders and translating their input into effective risk management approach and guidance.
• Framework Knowledge: Familiarity with GITC in frameworks like SoX, COBIT, ISO 27000, and Assurance reports (such as ISAE 3402 and AICPA SOC reports).
• Team management: As a senior you will be guiding and coaching your more junior team members and take ownership of delivering on improvement projects.
• Communication: Proficient in conveying the essence of Framework compliance and Control testing and maintaining clear instructions and templates.
• Certifications: RE or CISA (Certified Information Systems Auditor) certifications are a plus.

To be considered for this position, you must be located in the Netherlands or elsewhere in the EU and have the legal right to work in the Netherlands. We are unable to consider candidates requiring relocation from another country.