Security Risk Officer
As a Security Risk Officer within Global Information security (GIS) team, you will focus on security risks across the organization. This will be done in collaboration with members of GIS team, Information Security Officers (ISOs) in the domains (regions, corporate functions and enterprise platforms), as well as security and risk Subject Matter Experts (SMEs) within DLL. This role operates in a dynamic cybersecurity environment where priorities may evolve rapidly. The successful candidate is expected to demonstrate flexibility, adaptability, and a proactive mindset, taking ownership of emerging topics beyond explicitly defined responsibilities when needed.
This role will support GIS in ensuring that security risk management practices are uniformly and appropriately incorporated into DLL.
Day to day:
The Security Risk Officer fulfills the following tasks:
- Conduct Information security risk identification and assessment across various domains and areas
- Keep oversight of and monitor security risk management practices and ensure execution of security risk management across the organization according to policies and procedures.
- Continuously monitor trends across the organization and the threat landscape to anticipate and plan for future impact of Information security risk to DLL
- Constructively engage with ISOs in the domains (regions, corporate solutions and enterprise technology)
- Establish information security risk ownership and accountability within the domains.
- Act as a subject matter expert (SME) on security risk management for the domains .
- Establish periodic reports and dashboards to measure and monitor information security risk practices of the organization
- Continuous improvement of security risk management practices in the organization. This includes updates to existing risk management policies and procedures as well as their implementation
- Stay updated on the latest security threats, trends and technologies
- Proactively identify and take ownership of emerging security risk topics, even if outside the formally defined scope of the role
- Support ad-hoc initiatives, cross-functional efforts, and urgent security matters as required
- Contribute to broader GIS objectives beyond core security risk management activities when needed
All members enjoy
- Two working days per year volunteering for a local charity.
- Health and Wellness program including healthy food, free health checks, fun health & vitality activities.
- Flexible hours with possibility to work from home
- Career development opportunities: online learning, member development programs.
-
Essentials:
Education, Training & Previous Experience Requirements
- Bachelor or master’s in information technology / computer science or related.
- 5+ years of experience working in security risk management, security governance, and optionally security regulatory requirements
- Experience working in a global organization with central and de-central security function
- Certifications (at least one of): CISSP/CISM/CRISC/CISA/CGEIT/CGRC.
- Excellent English verbal and written communication skill
Technical and Business Experience Requirements
- Experience with security risk assessment, monitoring and advice
- Experience with cloud security
- Knowledge on a wide range of security topics like IAM, IDS/IPS, access control systems, PIM, Azure, encryption, PIM
- Experience with reporting and data analysis tools like PowerBI and MS Excel
- Experience with security frameworks and methodologies, such as ISO/IEC 27001 or 27002, NIST Cybersecurity Framework (CSF)
- Experience working with business leaders and enterprise projects
- Experience with using GRC tools (like OneTrust and/or Archer)
- Experience with DevOps, AppSec, Agile, Safe.
Knowledge and Skills Requirements
- Strong communicator and storyteller (active listener, constructive feedback, assertive, adaptive, conflict resolution)
- Demonstrates an ability to challenge, and manage choices
- Strong problem-solving and trouble-shooting skills
- Aptitude for understanding internal organizational environments and their relationship to the external business environment and risks
- Able to effectively analyze risk and review such analysis within the context of business problems
- Strong ability to convey complex security risks in a manner that is easily understood and actionable
- Ability to constructively challenge prevailing thoughts and processes
- Able to consistently, effectively defend ideas and solutions
- Adept at improving outcomes through proactive team coaching and development
- Ability to measure and report on the effectiveness of security risk management program
- Ability to translate security objectives into security risk management policies and procedures
- Ability to align security initiatives with the organization's overall business strategy
Key Behavioral Requirements
- Demonstrates a “can-do” attitude and ownership mindset, proactively driving outcomes
- Comfortable working in ambiguous and evolving environments
- Ability to multitask and reprioritize effectively based on organizational needs
- High level of flexibility and willingness to step outside defined role boundaries when required
- Strong collaboration mindset across teams and disciplines
Choose wellbeing
DLL’s wellbeing ambition is to educate, equip and empower members to build connections, manage their mental, emotional, physical and financial wellness and maintain balance between work and the other priorities that make up their lives.
Our four wellbeing categories are as follows:
- Connection – Build meaningful connections with other DLL members
- Health – Manage mental, emotional and physical health
- Finance – Provide learning opportunities to help members achieve personal financial health
- Lifestyle – Maintain balance between work and life priorities
These are the things that matter to our members and the wellbeing of our members matters to DLL
Good to know:
- Deadline for application: July 5th (Due to high volume of applications this requisition may close prior to posted close date)
- The selection process may involve an assessment
- Applications via email will not be reviewed. Please apply online via our career website
- #LI-OMNIA
- DLL’s referral program applies
- For more information, please contact our Talent Acquisition Partner Omnia Hassan via [email protected]
DLL appreciates the time you spend applying to our openings. We advise only those who qualify for an interview will be contacted. Hiring subject to successful completion of a background check.
DLL is an equal opportunity employer. We are committed to inclusive, barrier-free recruitment and selection processes and work environments. If contacted for an employment opportunity, please advise Human Resources if you require accommodation in accordance with our values and all applicable legislation.
DLL, a great place to build your career
DLL is a global asset finance company that partners with manufacturers, dealers, distributors, and end users to facilitate access to equipment and technology. Headquartered in Eindhoven, the Netherlands, we operate in over 25 countries, offering financial solutions across various industries. We are also a 100% subsidiary of our parent company Rabobank, one of the world’s largest financial companies. Join our community of over 6.000 members from 75 nationalities! At DLL, our unique culture — shaped by our values (We put our customers first -Together we achieve more-You can count on me - I challenge myself and others to grow) and behaviors that define us — is at the heart of everything we do.
We offer exciting job opportunities where you feel welcomed, respected and empowered to be your authentic self and share your best ideas. At DLL, we believe in the strength of our diverse perspectives and experiences, which make our global community thrive.
You’ll receive competitive pay, generous benefits, health and wellbeing support, and manage your work-life balance through our hybrid working flexibility.
Our global operations offer you a variety of development opportunities and we encourage you to take on new challenges across our departments, businesses and regions.
Our company strategy emphasizes our commitment to sustainable business and making social impact is part of that as well. Together, we’ll “Partner for a better world” to make a positive impact. Joining DLL, means joining a company that consistently scores higher than the industry average in Employee Engagement surveys. This is also being acknowledged through many Great Place to Work certificates. People who work at DLL, like DLL.
Join us in Partnering for a better world!
