> Markdown version of [/jobs/ext/40024-it-risk-sme](https://www.wearedevelopers.com/jobs/ext/40024-it-risk-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Risk SME - **Company:** LEVY PROFESSIONALS - **Location:** Amsterdam, Netherlands - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Confluence, JIRA, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Information Technology Audit, Open Systems Interconnection (OSI), Atlassian Tools, Servicenow - **Published:** May 28, 2026 - **Apply:** https://nl.indeed.com/viewjob?jk=58df1b0dc4690209 ## About the Role Do you have experience in ServiceNow?, Do you have a Master's degree?, * 7+ years of professional experience working in a complex IT, Risk, or Compliance environment. * Minimum of 5 years of dedicated IT Risk experience, collaborating closely with both internal and external IT Risk & Control/Audit teams. * Proven experience working within a regulated, financial, or highly structured IT industry. * Hands-on knowledge of the Audit Lifecycle and frameworks like ITIL, COBIT, and NIST (NIST experience is highly preferred)., * Education: Bachelor's or Master's degree (or equivalent professional level) in IT, Information Security, or a related field. * Mandatory Certification (at least one of the following is required): + CISA (Certified Information Systems Auditor) + RE (Register EDP-Auditor) + ISO 27001 Lead Auditor + CRISC or CGEIT * Preferred Certifications: CISM or CISSP. * Soft Skills: A self-starter mindset; you naturally take the lead and stay "in the driver's seat" without waiting for direction. * Communication: Excellent written and verbal English communication skills, with a proven ability to present and advise senior stakeholders and management. * Attention to Detail: Exceptional documentation skills. * Tools (Preferred): Familiarity with Atlassian products (Jira, Confluence), AGRC, and/or ServiceNow. ## Description A proactive and highly analytical IT Risk SME to join our client's IT Control team in Amsterdam. In this role, you will serve as a domain expert guiding internal and external IT audits, ensuring the timely completion of evidence requests, and driving risk mitigation across a global IT landscape. This is a key 1LoD Control role where you will actively improve IT Audit processes and the IT Risk & Control (R&C) Framework. You will: * Provide 1LoD IT Audit guidance within the IT Control & Service Management team across all aspects of the global IT landscape. * Organize, control, and monitor progress on follow-ups for audit assessments and questionnaires. * Document IT Audit and questionnaire handling processes to ensure business continuity. * Maintain, monitor, and continuously improve the IT R&C Framework. * Prepare, coordinate, execute, and document 1LoD workshops and supporting evidence to resolve OSI findings. * Liaise between the IT Center of Excellence, IT teams across regions (NL, US, AP), suppliers, and 2LoD Risk Management. * Execute risk assessments, analyze compliance data, and present results and mitigating strategies to senior management. * Additional activities: You will be responsible for educating global employees on IT Risk management best practices, reviewing/revising IT procedures, and aligning multi-regional stakeholders on standardized risk initiatives. ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment) - [42 x 2 Canvases Later: Two Years, Two Minds, Many Lessons](https://www.wearedevelopers.com/videos/1458-42-x-2-canvases-later-two-years-two-minds-many-lessons) - [A Founder's Journey : From Startup Chaos to Purposeful Growth](https://www.wearedevelopers.com/videos/1926-a-founder-s-journey-from-startup-chaos-to-purposeful-growth) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) ## Related Articles - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)