IT Risk Officer

What is the role about? 

We are expanding our Enterprise Risk Management team and, hence, looking for an IT Risk Officer. The main objective of the team is to ensure that the Business operates within the risk appetite established by the Management Board. To achieve this objective, the ERM team designed and implemented a sound, unified framework for the risk management and internal control system.

As a member of the ERM team, you will improve and maintain the IT risk and control framework. You will play a fundamental role in continuously growing, improving, and embedding this control framework in the organisation. You will act as a facilitator in the identification, assessment, monitoring and reporting of IT risks, which will support the Business in making risk-based decisions.

The outreach of your role will be the entire organisation, as you will be interacting directly with employees across all departments to ensure the IT Risk policies are followed on various topics, such as Business Continuity Management, Change Management, Information Security, IT Risk, Identity & Access Management and overall Risk awareness. The flat organisation hierarchy will enable you to quickly build a network and immerse yourself in our company culture.

How will you make an impact?

• Guiding & executing the implementation of new policies and extending the risk framework accordingly
• Conducting risk assessments by identifying and analysing IT and ​​Security risks
• Managing the security audits performed by external security specialists
• Developing a business continuity plan and maintaining the incident management procedure
• Executing periodic disaster recovery tests together with the business
• Collaborating with our IT teams to develop and implement best practices to protect and restore data and systems in the event of breaches, vulnerabilities and hackers

How will you be successful?

• At least 3 years of relevant working experience in the financial sector
• Demonstrated knowledge of IT Security controls and network/infrastructure, as well as security practices and security tooling
• Knowledge of IT Risk measurement models and in creating swim lane diagrams
• Strong analytical skills and experience in data-driven decision-making
• Experience in automation of processes and monitoring of the output
• Demonstrated understanding of ISO31000 and ISO27001
• The ability to operate at own initiative, with a proactive attitude; a hands-on mentality is vital for this position
• Excellent stakeholder engagement and communication skills
• Holder of security certificates - CRISC, CISA, CISM, CISSP or other equivalent certificates, could be of great added value (but is not required)

What do we offer?

Excellent employment terms, including:

• A very competitive package
• Catered lunch and breakfast in the office
• 26 days of annual leave, and your birthday off! 
• Personal development budget and internal courses
• Unlimited access to coaching platform and monthly wellbeing budget 
• Hybrid environment within The Netherlands

Who are we?

We are Bitvavo. We’re on a mission to make digital assets accessible to everyone. This means creating a user-friendly and reliable trading platform, with a wide variety of digital assets and transparent trading fees. Over the years we’ve become a trusted exchange used by over one million Europeans.

Bitvavo was founded in 2018 and has come a long way since then. We’re now a team of more than 200 employees from 33 different nationalities and we’ll keep growing to achieve our mission. Our headquarters are based in the canal district of Amsterdam.