Cyber Security Risk Assessor

Introduction

• 36 hours per week
• Start date: 01 October 2026
• End date: 01 April 2027
• Extension is possible
• Hybrid way of work. Three days per week at the office.
• ZZP is not allowed
• Relocation is not possible for this role

Job description

Cyber criminals are getting smarter and smarter. Can you keep our data safe? The need for information security is growing in a fast pace, especially within the banking sector, where there is much to be gained for cyber attackers. For this reason we are constantly looking for smarter ways to make Clearing banking as safe as possible. This is a key capability because there is a lot at stake. The Security Risk Assessors within our organization are the expert IT security advisors. The thre core activities are supporting product owners with their control self-attestation, threat modelling, perform in-depth security reviews on applications, infrastructure, SaaS and AWS. Work in the global security team of ABN AMRO Clearing bank. Three days per week at the office.

With the following results (SMART)

- Conduct In dept security risk assessment on IT systems and applications. Data collection via interviews with subject matter experts. Facilitate threat modelling sessions. - Present findings to relevant stakeholders.

- Support application owners with their self-attestation security checks

- Perform threat intel based security assessments, these are in-depth (very technical) security reviews.

Relevant knowledge, skills, competences & desired education level

- As an information security risk assessor, you play a crucial role in securing our application & infrastructure IT landscape by identifying security risks.

- You focus on our crown jewels, and ensure that security is constantly improving.

- You contribute to the safety of the bank by securing individual applications, but also by looking at the bigger picture.

- You advise and work together with our talented development teams to ensure information security.

Your expertise

• 7+ years of experience in the IT security / application / infrastructure security field

• Information Security (IS) professional qualifications such as CISSP, CCSP, CEH, CISA, CISM and CCSK

• Broad knowledge of different IT and security capabilities and processes

• Development life-cycle knowledge, e.g. secure SDLC and security by design

• Experience with performing security assessments and with translating generic security requirements to specific cases

• Experience with IS documentation, -report writing, reviewing and consulting

• Stakeholder management skills, especially in a multi-cultural and international environment

• Strong communication skills both verbally and in writing in English.