Information Security Expert

At a glance

The importance of information security has grown tremendously in the last years. That is why we are constantly looking for even smarter ways to make digital banking as secure as possible. A big responsibility, because there is a lot at stake. Do you want to play a role in guaranteeing the security of customer data in our complex banking environment?
With your knowledge and experience, you can help improve the overall security posture of ABN AMRO by identifying relevant information security risks and by advising on ways to mitigate them. What do you see when you envision the next step? Work on achieving your goals and develop yourself professionally and personally. Tell us your story. We want to hear it!

Your job

You will join the Supply Chain Security (SCS) team, part of the Corporate Information Security Office (CISO) department, within the Cyber Defence grid. CISO employs approximately 450 colleagues who are responsible for the bank's information security globally, across all subsidiaries and countries. The grid Cyber Defence is responsible for the security operations activities of ABN AMRO, and, your team continuously provide visibility into the security posture of the vendors of ABN AMRO. The Supply Chain Security team members are experienced in information security and vendor relations. The team is diverse in both nationalities and professional background, which makes it a great place to work and develop yourself.
 
As an Information Security Expert you will be responsible to manage, monitor and report on the performance and the status of the security posture of the strategic partners both on operational and tactical levels.

 Key Responsibilities:

• Govern and manage IT vendor relationships in terms of performance regarding the security aspects of the underlying contractual obligations;
• Execute Vendor Security Risk Assessments and perform follow up actions. Focus on the risks that matter, translate them into the business context and help your stakeholders to address security challenges; 
• Ensure that information security risks are identified and managed effectively throughout all the stages of the relationship with external vendors;
• Review the applicability and the quality level of assurance reports issued by the third parties;
• Ensure continuous improvements are achieved both in the quality of reporting and service provided by the third party;
• Manage the IT security related part of a contract with the third party provider. Work together with 2nd line functions such as legal, compliance, procurement and other internal parties on contractual changes;
• Help solving security-related questions, take initiative and escalate in time if needed; 
• Signal improvements related to the way of working inside the team and contribute to improving the excellence of our service offering; 
• Stay up-to-date with emerging cyber security trends and the latest developments in the field of technology, information risk and threats, actively share this knowledge with your colleagues and help to determine if/when to integrate them into the assessment program.

Working environment

You will join the Vendor Security Services (VSS) team, part of the Corporate Information Security Office (CISO) department, within the Operations and Intelligence (O&I) grid. CISO employs approximately 400 colleagues who are responsible for the bank's information security globally, across all subsidiaries and countries. The O&I department is responsible for the security operations activities of ABN AMRO, and, your team continuously provide visibility into the security posture of the vendors of ABN AMRO. The VSS team members are experienced in information security and vendor relations.

Your profile

You feel at home in a technical environment. You have shown in the past that you are able to learn quickly and apply the learned skills immediately. You like to work together with other specialists and you know from experience teamwork sets changes in motion. And that's what you want: getting things done! 
 Required skills:

• HBO/Bachelor or university level of working and thinking;
• At least 1-3 years of relevant experience in the area of information security;
• Experience in executing information security risk assessments and audits;
• You are knowledgeable on one or more areas such as security processes, technology architectures, network security, application security and vulnerability management;
• Experience in a complex environment (internal and external stakeholders, different time zones, different cultures) 
• Fluent in verbal and written English;
• You are pragmatic, result-driven, analytical and possesses good verbal, written communication and social skills;
• You are energetic and like to work in an agile environment;
• You take ownership of your own and team’s delivery and have a proactive attitude.

It’s a plus if :

• you have knowledge of and experience in managing multi-vendor environment on operational and tactical levels, in particular service providers.
• A strong ability to translate technical risks into business risks and vice versa;
• You possess a number of relevant certifications like CISSP, CISA, CISM, CCSP, etc.;

We are offering

We offer a challenging job and you are directly responsible for your own successes. We will stimulate every opportunity to work on personal development to keep on top of your expertise. At ABN AMRO, we use our knowledge, expertise and network to help our clients within and outside the Netherlands achieve their goals based on informed decisions. Our clients’ interests always come first. We want clients to understand our products, and we sometimes say ‘no’ if a product involves a risk that is too high for the client. Putting clients’ interests first also means communicating in plain language and crafting smart solutions that genuinely make a difference. That is our goal.

Interested?

Does this sound like something you’d be interested in? Send us your application as soon as possible. 
We are looking forward to meeting you!

Equal opportunities for all

The success of our organisation depends on the quality of our people and the ideas that they have. Truly surprising insights and innovative solutions for our clients result from an interplay of cultures, knowledge and experience. Diversity is therefore extremely important to our organisation. To ensure that everyone at ABN AMRO can develop their talents, we encourage an inclusive culture in which all colleagues feel engaged and appreciated.

Disclaimer external recruitment agencies

External recruitment agencies need to have a signed agreement with ABN AMRO BANK N.V., executed by a Talent Acquisition Specialist, when submitting a resume to a vacancy. In addition, a recruitment agency can only submit a resume when invited by a Talent Acquisition Specialist to join the search for a right candidate. All unsolicited resumes sent to us will be considered property of ABN AMRO BANK N.V. In this case, ABN AMRO will not be held liable to pay a placement fee.