IT Risk SME (Finance)

TL;DR

IT Risk SME (Finance): Guiding internal and external IT audits and driving risk mitigation across a global IT landscape with an accent on 1LoD Control and the R&C Framework. Focus on executing risk assessments, managing the audit lifecycle, and resolving OSI findings to ensure systemic compliance.

Location: Amsterdam, North Holland

Salary: Negotiable EUR / Year

Company

Professional solutions provider connecting skilled professionals with organizations ranging from tech start-ups to global players since 2000.

What you will do

• Provide 1LoD IT Audit guidance across all aspects of the global IT landscape.
• Organize and monitor progress on follow-ups for audit assessments and questionnaires.
• Maintain and continuously improve the IT Risk & Control (R&C) Framework.
• Coordinate workshops and document evidence to resolve OSI findings.
• Liaise between the IT Center of Excellence, regional IT teams (NL, US, AP), suppliers, and 2LoD Risk Management.
• Execute risk assessments and present mitigating strategies to senior management.

Requirements

• 7+ years of experience in a regulated financial or highly structured IT industry.
• Hands-on knowledge of the Audit Lifecycle and frameworks like ITIL, COBIT, and NIST.
• Mandatory certification: at least one of CISA, RE, ISO 27001 Lead Auditor, CRISC, or CGEIT.
• Location: Must be based in or able to work in Amsterdam.

Nice to have

• Minimum of 5 years of specific NIST experience.

Culture & Benefits

• International network of professionals across 14 countries.
• Focus on a people-centric strategy and professional growth.
• Opportunity to work within a global IT landscape.