Risk and Compliance Manager (Cybersecurity)

TL;DR

Risk and Compliance Manager (Cybersecurity): Leading a team to identify and mitigate technology-related risks for core DevOps platforms with an accent on cybersecurity, IT compliance, and regulatory frameworks. Focus on embedding secure software development principles into CI/CD pipelines and ensuring alignment with risk appetite across cloud and on-premise infrastructure.

Location: Hybrid in Amsterdam, Netherlands. Full relocation support available.

Company

Global leader in travel technology providing a wide range of accommodation and travel services to millions of travelers worldwide.

What you will do

• Lead and develop a team of Risk Analysts and Officers to identify and manage technology risks for Central Tech platforms.
• Advise senior technical stakeholders on cybersecurity, IT risk, and regulatory compliance obligations.
• Implement tactical plans for Platform Risk Management aligned with Central Tech business objectives.
• Develop IT security policies and integrate secure software development practices (SAST, DAST, SCA) into CI/CD pipelines.
• Collaborate with internal and external audit teams to provide technical risk perspectives and ensure control maintenance.
• Monitor emerging cyber threats and stay current with security best practices in DevOps environments.

Requirements

• 8–12 years of relevant experience in risk management, audit, or IT assurance.
• Deep understanding of IT General Controls (ITGCs), especially within fast-paced DevOps environments.
• Expertise in public cloud platforms (AWS, GCP, Azure) and DevOps tooling (Kubernetes, Gitlab).
• Strong knowledge of regulations including SOX, PCI-DSS, GDPR, and CCPA.
• Familiarity with cybersecurity frameworks such as NIST, ISO27001, and CIS.
• Bachelor's or Master's degree.

Nice to have

• AWS Certified Solutions Architect or AWS Certified Security certifications.

Culture & Benefits

• Full relocation support for the employee and their family to move to Amsterdam.
• Hybrid work model with flexible arrangements and up to 20 days per year working from abroad.
• Competitive compensation package including bonuses, stock potential, and 29 vacation days.
• Comprehensive health, life, and disability insurance.
• On-site meals, coffee, and snacks, plus access to online learning platforms and mentorship programs.