Senior ICT Risk & Compliance Lead (2LoD, ISO27001, PCI DSS)

Care Professionals; Amsterdam, Utrecht; Presencial; EUR 90 000 - 130 000; Tempo integral

Resumo da oferta

Care Professionals in Amsterdam seeks an operational owner of the ICT Risk Management Framework within the second line of defence. You will oversee day-to-day ICT risk activities, monitoring, and reporting in line with DORA, ISO 27001, and PCI DSS.

You will maintain the ICT risk register, run the RCSA cycle for ICT domains, and manage key controls and KRIs. You will lead ISMS policy governance and coordinate security monitoring from a 2LoD perspective, shaping risk signals.

Qualificações

• Experience leading ICT risk programs in a regulated environment.
• Knowledge of ISO 27001, DORA and PCI DSS requirements.
• Strong governance, controls monitoring and reporting skills.

Responsabilidades

• Own the ICT risk management framework and 2LoD activities.
• Maintain risk registers, run RCSA cycles, monitor KRIs.
• Oversee ISMS policy suite and 2LoD security monitoring.
• Coordinate PCI DSS governance and QSA interactions.
• Manage Eramba GRC platform and audit support.
• Liaise with EY IT audit and annual risk reporting.

Conhecimentos

ICT risk management

2LoD governance

ISO 27001

DORA compliance

PCI DSS

GRC tooling

Stakeholder liaison

Audit coordination

Ferramentas

Eramba GRC

Descrição da oferta de emprego

Care Professionals in Amsterdam seeks an operational owner of the ICT Risk Management Framework within the second line of defence. You will oversee day-to-day ICT risk activities, monitoring, and reporting in line with DORA, ISO 27001, and PCI DSS.

You will maintain the ICT risk register, run the RCSA cycle for ICT domains, and manage key controls and KRIs. You will lead ISMS policy governance and coordinate security monitoring from a 2LoD perspective, shaping risk signals.