Senior IT Security Pro: DevSecOps & Compliance (Hybrid)

Rabobank; Utrecht; Hybrid; EUR 67,000 - 96,000; Full time

Benefits offered by this job

Thirteenth month

Holiday allowance 8%

Employee Benefit Budget 10%

Development budget €1,400/year

Hybrid work arrangement

Job summary

Rabobank is seeking a Senior IT Security Professional for the FEC CDD Detection Area. You will embed secure design, coding, testing and operations across the software development lifecycle, and advise on IT risk and security decisions.

You will collaborate with technical leads, architects and product teams to implement secure solutions meeting internal and regulatory standards, while enabling secure-by-design and DevSecOps practices.

Qualifications

• Bachelor’s or master degree in Computer Science, Cyber Security, Information Security, IT, or Engineering (or equivalent experience).
• CISSP, CISM, CISA certifications are preferred or required.
• 10+ years of experience in cyber security and information technology risk management.

Responsibilities

• Lead security within the FEC CDD Detection Area and advise teams on information technology risks and security decisions.
• Embed secure design, coding, testing and operations across the software development lifecycle, including vulnerability management and incident response.
• Improve compliance and audit readiness through clear security reporting, coaching and practical secure-by-design and DevSecOps guidance.

Skills

Security risk management

Stakeholder management

Cross-functional collaboration

Security governance

Education

Bachelor’s or Master’s degree in Computer Science, Cyber Security, IT, or Engineering

CISSP, CISM, CISA

Tools

Databricks

Camunda

Azure security

Job description

Rabobank is seeking a Senior IT Security Professional for the FEC CDD Detection Area. You will embed secure design, coding, testing and operations across the software development lifecycle, and advise on IT risk and security decisions.

You will collaborate with technical leads, architects and product teams to implement secure solutions meeting internal and regulatory standards, while enabling secure-by-design and DevSecOps practices.