Senior Risk Manager IT
About the assignment
You join a growing energy data services organisation driving the Dutch energy transition. Your mission: strengthen IT platform reliability through effective risk management and control frameworks.
You design, assess, and optimise control frameworks for platform solutions. You identify control gaps, report findings to leadership, and advise on risk mitigation. You facilitate risk sessions across product teams, architects, and audit partners—building risk awareness in a SAFe-driven environment.
Your impact is tangible: you ensure the organisation's cloud infrastructure meets stringent compliance standards while enabling innovation.
Your responsibilities
- Design and optimise Control Frameworks aligned with ISO 27001, ISAE 3402, and COBIT standards
- Assess control design, existence, and operating effectiveness; report gaps to management
- Advise on risk mitigation strategies and compliance requirements in complex IT environments
- Facilitate risk assessment sessions and stakeholder workshops across product and infrastructure teams
- Collaborate with Product Owners, System Architects, and Internal Audit on control validation
- Monitor compliance posture against regulatory and internal standards (ISO 27001/2, ISO 31000)
- Build and reinforce risk awareness culture within agile, cross-functional teams
Tech Stack & Tools
Platforms & Tooling
Frameworks & Standards
Cloud & Infrastructure
Methodologies
Certifications (preferred)
Must-haves
- Minimum 5 years as IT auditor, quality manager, or risk manager
- Hands-on experience with ISO 27001/2, ISAE 3000/3402, and COBIT
- Fluent in Dutch and English (spoken and written)
- Knowledge of cloud platforms (AWS) and SAFe/Agile environments
- HBO/WO degree; post-Master IT Audit qualification strongly preferred
Nice-to-haves
- Experience with Identity & Access Management (IAM) concepts and controls
- Certifications: CISA, CRISC, or equivalent
- Hands-on experience designing control frameworks in regulated industries
What we offer
- Hybrid work (Amersfoort); flexible 32-40 hour weeks
- 6-month interim role with extension opportunity
- Work at the intersection of IT risk and energy transition—real societal impact
- Collaborate with expert architects, product leaders, and audit professionals
- Shape compliance and control strategy for critical energy infrastructure
- Personal guidance from a dedicated MVPeople consultant who knows your niche
The process
Introduction
Phone call with your MVPeople consultant (within 24 hours)
Match & Brief
We discuss the assignment in detail and prepare you
Client meeting
Introduction to the client
Start
Contracting and onboarding
Details
Type
Consultancy
Location
Provincie Utrecht
Work model
Hybrid
Level
Senior
Industry
energie
Posted
31 March 2026
Contact
MVPeople Group
jobs@mvpeoplegroup.com