Medior Non-Financial Risk Manager

Ayvens; Netherlands; On-site; EUR 70,000 - 90,000; Full time

Job summary

Ayvens in the Netherlands is seeking an Information Risk Manager to oversee and strengthen its Information Risk profile across the Group. The ideal candidate will have over 8 years of experience and a Master's degree in a related field.

This role involves advising senior management on risk matters, ensuring proper risk management practices, and fostering a community of information risk awareness within Ayvens.

Qualifications

• 8+ years of experience in Information Risk Management, preferably in banking or financial services.
• Strong knowledge of information risk governance and risk appetite.
• Professional certifications like CISSP or CISM preferred.

Responsibilities

• Oversee and strengthen Ayvens' Information Risk profile across the Group.
• Provide independent oversight of information risk management processes.
• Serve as a trusted advisor to senior management on Information Risk.

Skills

Interpersonal and advisory skills

Information risk governance

Analytical skills

GRC tool experience

Education

Master's degree in Information Security, Risk Management or a related field

Tools

GRC tools

Job description

What are you going to do?

As our new Information Risk Manager, you will be responsible for independently overseeing and strengthening Ayvens' Information Risk profile across the Group. You will challenge and advise the business on effective risk identification, assessment and mitigation, ensuring that information risks are properly managed in line with Ayvens' strategy, risk appetite, and regulatory expectations. You will play a key role in safeguarding information assets, preventing financial and reputational damage, and embedding information risk management into daily business activities across an international environment.

You will report to Team Lead NFR Information Risk.

• Risk, Governance and Oversight: Provide independent oversight of Ayvens information risk management processes ensuring the IT risk management framework including its policies and procedures are properly designed and consistently followed. Challenge the first line of defence to ensure that risks are effectively identified, assessed and managed, while maintaining objectivity and a critical perspective on risk tolerance and mitigation strategies.
• Advisory and Consultation: Serve as a trusted advisor to the Ayvens Group senior management and Ayvens entities, offering expert advice on Information Risk related matters. Provide guidance in implementing effective risk controls while balancing Ayvens business objectives with appropriate risk management strategies. Proactively recommend improvements to enhance Ayvens' overall Information Risk posture.
• Risk Assessments and monitoring: Challenge and evaluate the effectiveness of Information Risk assessments and mitigation plans for strategic entity overarching projects. Ensure that appropriate risk indicators are in place and elevate emerging risks to ensure timely intervention. Ensure that the risk appetite and thresholds are aligned with Ayvens overall strategy.
• Leadership in building an Information Risk aware community: Lead the development of an Ayvens-wide information risk community by fostering cross‑functional collaboration, building strong stakeholder relationships, promoting information risk awareness through targeted training and facilitating the sharing of best practices to embed a unified, proactive Information Risk management culture across Ayvens.

Who are we looking for?

The ideal candidate has the interpersonal and advisory skills required to confidently engage with senior management and stakeholders across multiple countries and disciplines. You are a seasoned information risk professional with a strong governance mindset, able to critically challenge risk decisions while supporting the business with pragmatic and value‑adding advice.

• 8+ years of experience in Information Risk Management, preferably within a regulated (banking or financial services) environment.
• Strong knowledge of information risk governance, risk assessments, control frameworks and risk appetite concepts.
• Proven ability to advise and challenge senior stakeholders on complex information risk topics.
• Experience working in an international, complex organizational context.
• Strong analytical skills with the ability to identify vulnerabilities, threats and appropriate controls.
• Experience working with Governance, Risk & Compliance (GRC) tools (preferred).
• Professional certifications such as CISSP and/or CISM, or willingness to obtain these within 1-2 years.
• Fluent in English is required.

Educational requirement: Master's degree in Information Security, Risk Management or a related field.