Operational Risk Manager | DORA, ICT & Operational Resilience About the organisation Our client, a leading international financial institution, is looking to appoint an experienced Operational Risk Manager to join its second line risk function. This is not a traditional operational risk role. The position focuses on providing independent oversight and challenge across DORA, ICT Risk, Operational Resilience and Outsourcing Risk, working closely with senior stakeholders to strengthen the firm's non-financial risk framework and resilience capabilities. This is an excellent opportunity for someone who enjoys combining regulatory knowledge with practical risk management and stakeholder engagement.

Key responsibilities

• Act as second line of defence for ICT, third-party and operational resilience risk, providing technical and practical challenge to the first line
• Lead the entity's DORA implementation and ongoing compliance, translating regulatory requirements into workable controls rather than documentation
• Assess the design and effectiveness of technology controls, and challenge where mitigation falls short of risk appetite
• Contribute to the development of risk appetite for execution-related operational risks, particularly ICT, outsourcing and resilience
• Support technology stress testing and scenario work on critical processes
• Prepare and present risk positions to senior management, the CRO and Board-level committees
• Engage directly with the ECB and support regulatory reviews, examinations and remediation
• Work in close partnership with UK-based risk, technology and business teams
• Undertake reviews of material non-financial risks and use the output to drive action with business executives

Key requirements

• Around 10+ years' relevant experience, at a level consistent with SVP
• Direct, hands-on DORA experience — implementation, not just familiarity
• Demonstrable expertise across ICT risk, third-party risk, operational resilience, technology controls and non-financial risk more broadly
• A background that includes first line risk and control, technology risk, compliance or regulatory programme delivery
• Proven ability to present to and constructively challenge senior stakeholders, including executive and Board-level audiences
• Comfortable working independently, setting your own agenda and driving work forward without close direction
• Pragmatic, hands-on and technically credible
• Fluent English (Dutch is a plus)

Who this role will not suit: career operational risk professionals whose experience is primarily framework design, policy ownership and reporting. The team already has that capability.

Good to have

• Experience in an ECB-supervised entity, or direct exposure to ECB reviews and examinations
• Capital markets or trading environment experience
• Technology stress testing experience
• Experience working across UK and continental European teams

What's on offer

• Base salary of €115,000 – €125,000, depending on experience
• Bonus
• Strong pension scheme
• Travel allowance
• Hybrid working, 3 days per week in the Amsterdam office
• A small, high-performing risk team with genuine influence and direct access to the CRO and Board
• High-visibility regulatory work at a point where the entity is investing in the function

Interested?

If you have built or run ICT and resilience risk in a regulated bank and you want a role where your judgement carries weight rather than your documentation, this is worth a conversation.

Apply directly via the link below with an up-to-date CV. Candidates based in the Netherlands, London, Frankfurt or Paris are all welcome to apply.

Once we receive your application, one of our consultants will contact you for a confidential call to discuss the role, the team and whether it is the right move for you — before your details go anywhere near the client.

Shortlisting is already underway and interviews are being scheduled on a rolling basis, so early applications are encouraged.

Robert Walters Netherlands is acting as an Employment Agency in relation to this vacancy.