Senior Tech & Data Risk Manager

bol

Utrecht

2 days ago

Utrecht

2 days ago

Apply

Senior Tech & Data Risk Manager

Bol is seeking a Senior Tech & Data Risk Manager to safeguard its retail tech platform serving 13 million customers and 50k+ partners. The role combines hands-on risk management with strategic leadership, focusing on cybersecurity, data governance, AI risks, and regulatory compliance. Candidates need 10-12+ years of experience in tech risk, cybersecurity, and IT compliance.

Apply

Hybrid

Full-time

Senior

ISO 27001

NIST

Salary

Not specified

Work Location

Utrecht, Utrecht, Netherlands, NL

Work Model

Hybrid

Experience Required

12 years

Employment Type

Full-time

Experience Level

10-12+ years of relevant experience

Core Qualifications

Technical (Must-have)

ISO 27001NISTCOBITcloudmicroservice architectureDevOpsGDPRNIS2DORAAI Act

Soft Skills

communicationleadershipstrategic thinkingcollaborationproblem solvingdecision makinginfluenceindependent challenge

Key Responsibilities

•Provide data-driven insights into Tech, cyber, and data risks
•Strengthen risk-based decision-making across tech, data and product domains
•Drive a structured risk management cycle to enhance the maturity of Tech & Data Risk Management frameworks
•Enable teams to identify, assess, and mitigate risks proactively
•Improve and embed risk processes, taxonomies, and reporting
•Act as a trusted advisor to senior stakeholders on Tech & Data Risk Management frameworks
•Engage with senior management to ensure clear visibility of key risks and drive formal risk acceptance processes
•Develop and deliver high-quality risk insights/reports to support senior leadership and governance oversight
•Translate regulations (e.g., NIS2, GDPR, DORA, AI Act) into actionable controls and policies
•Maintain readiness for regulatory inspections

Senior Tech & Data Risk ManagerTech RiskCybersecurityData RiskComplianceNIS2GDPRDORAAI ActHybrid

Key Responsibilities

•Provide data-driven insights into Tech, cyber, and data risks

•Strengthen risk-based decision-making across tech, data and product domains

•Drive a structured risk management cycle to enhance the maturity of Tech & Data Risk Management frameworks

•Enable teams to identify, assess, and mitigate risks proactively

•Improve and embed risk processes, taxonomies, and reporting

•Act as a trusted advisor to senior stakeholders on Tech & Data Risk Management frameworks

•Engage with senior management to ensure clear visibility of key risks and drive formal risk acceptance processes

•Develop and deliver high-quality risk insights/reports to support senior leadership and governance oversight

•Translate regulations (e.g., NIS2, GDPR, DORA, AI Act) into actionable controls and policies

•Maintain readiness for regulatory inspections