IT Risk Officer (Cybersecurity)

TL;DR

IT Risk Officer (Cybersecurity): Coordinating and improving IT and cyber risk reporting, audits, and assurance activities with an accent on translating complex technical risk data into actionable management reporting. Focus on developing SOC 2-based assurance models, managing cybersecurity audits, and optimizing risk data flows.

Location: Hybrid in The Hague; must be based in the Netherlands and able to work from the office at least 2 days a week

Company

A large international financial services organization supporting over 18 million customers.

What you will do

• Coordinate and prepare Group IT risk management reporting and the Group IT In Control Statement.
• Lead the transition toward a SOC 2-based assurance reporting model for all departments in the Group IT organization.
• Manage internal and external cybersecurity audits, including evidence collection, validation, and tracking findings.
• Translate complex IT and cyber risk information into clear, reliable, and traceable reporting for senior management.
• Collaborate with Security Officers, auditors, and risk functions to align reporting and resolve gaps.
• Optimize reporting templates and explore AI-enabled tooling for data analysis and reporting efficiency.

Requirements

• Experience in IT risk, cyber risk, internal control, or IT audit.
• Proficiency in Microsoft Excel (pivot tables, formulas) and Power BI for data visualization.
• Experience with workflow and planning tools such as Azure DevOps, ServiceNow, or IBM OpenPages.
• Strong coordination skills and the ability to manage timelines and deliverables across multiple stakeholders.
• Fluent English communication skills; proficiency in Dutch is strongly preferred.
• Availability for a hybrid setup in The Hague (minimum 2 days/week).

Culture & Benefits

• Hybrid working model with flexible office days.
• International working environment with a strong focus on knowledge sharing.
• NS Business card.
• 13th month and holiday allowance.
• 27 leave days plus 3 Diversity Days.