IS and IT Risk Officer

@ Adyen

IS and IT Risk Officer at Adyen

Adyen provides payments, data, and financial products in a single solution for top clients like Meta, Uber, H&M, and Microsoft. At Adyen, everything is engineered for ambition. Join an environment where risk management meets technology, and where you ensure that risk practices are applied across technological environments.

Role Overview

This role within the second line Enterprise Risk team focuses on Information Security and IT Risk. You will work closely with technical teams in the first line, guide risk mitigations, and ensure adherence to pre-defined risk appetites. Partnering with regulatory compliance, privacy colleagues, and external regulators, you will be instrumental in implementing security requirements and advancing the IT/IS framework.

Key Responsibilities

• Execute Information Security and IT Risk Assessments across diverse assets.
• Develop and maintain IT and Information Security Policies.
• Collaborate with key stakeholders and second-line teams on risk mitigation.
• Engage with regulators and external partners to clarify risk requirements.
• Drive process improvements to enhance team scalability and efficiency.
• Own second line risk oversight for specific technology risk projects.

Who You Are

• 3+ years experience in IT risk management, preferably in a Big 4 or similar environment.
• Strong background in IT Excellence, resilience, and risk evaluations.
• Effective communicator with both technical teams and business stakeholders.
• Knowledgeable in security regulations such as DORA and industry frameworks.
• Passionate about process improvement with a proactive approach to risk management.

Our Culture

Adyen values diversity, equity, and inclusion. We encourage candidates from all backgrounds to apply and be their true selves. We aim to provide a smooth candidate experience with feedback within 5 business days and a complete interview process within 4 weeks.

Key skills/competency

• IT risk management
• Information Security
• Regulatory compliance
• Risk assessment
• Process improvement
• Technical collaboration
• Security policies
• Stakeholder engagement
• Resilience
• Governance