{"id":12743,"date":"2026-09-16T00:00:00","date_gmt":"2026-09-16T00:00:00","guid":{"rendered":"https:\/\/www.a2z-cm.com\/information-security-expert-supply-chain-security-audit\/"},"modified":"2026-09-16T16:41:07","modified_gmt":"2026-09-16T16:41:07","slug":"information-security-expert-supply-chain-security-audit","status":"publish","type":"post","link":"https:\/\/www.a2z-cm.com\/nl\/information-security-expert-supply-chain-security-audit\/","title":{"rendered":"Information Security Expert (Supply Chain Security Audit)"},"content":{"rendered":"<h4 class=\"cx_h4 cx2_introduction\">Introduction<\/h4>\n<div class=\"cx2_introduction\"><ul> <li>36 hours per week<\/li> <li>Start date: ASAP<\/li> <li>End date: 30 September 2027<\/li> <li>Hybrid working, 1-2 days from the office.<\/li> <li>Travelling abroad is required for this role.<\/li> <li>Candidates have to live in the Netherlands.<\/li> <\/ul><\/div>\n\r\n<!--more-->\r\n\r\n<h4 class=\"cx_h4 cx2_function\">Function<\/h4>\n<div class=\"cx2_function\"><p>You will join the Supply Chain Security (SCS) team, part of the Corporate Information Security Office (CISO) department, within the Cyber Defence grid. CISO is responsible for the bank&#8217;s information security globally, across all subsidiaries and countries. The grid Cyber Defence is responsible for the security operations activities of ABN AMRO, and within our team we continuously provide visibility into the security posture of the vendors of ABN AMRO. The 20 Supply Chain Security team members are experienced in information security and vendor relations. The team is diverse in both nationalities and professional background, which makes it a great place to work and develop yourself.<\/p> <p>You can imagine that security is a major asset within the bank.&nbsp;<\/p> <p>As an Information Security Expert you will be responsible to manage, monitor and report on the performance and the status of the security posture of our vendors. This role is specifically aimed at conducting end to end audits.&nbsp;<\/p> <p>The team works according to the DevOps &amp; Agile methodology.&nbsp;<br>The working language within the team is English.<br>For your work you often engage with various stakeholders such as; Risk, Procurement, Contract Owners and our suppliers.&nbsp;<br>&nbsp;&nbsp;<br><strong>With the following results (SMART) &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<\/strong><br>&#8211; The Information security expert is responsible for conducting comprehensive, end\u2011to\u2011end audits of systems, processes, SaaS platforms, and internal controls to ensure compliance, security, operational efficiency, and risk mitigation.&nbsp;<br>&#8211; This role involves detailed analysis, evidence gathering, root\u2011cause identification, and actionable reporting to stakeholders across Security, IT, Compliance, and Business units.&nbsp;<br>&#8211; The expert provides insight into gaps, emerging risks, and improvement opportunities.<\/p><\/div>\n\r\n<h4 class=\"cx_h4 cx2_requirements\">Requirements<\/h4>\n<div class=\"cx2_requirements\"><p><strong>Technical Skills&nbsp;<\/strong><br>&#8211; Strong understanding of IT platforms, applications, security architectures, cloud\/SaaS models, and shared responsibilities.<br>&#8211; Hands-on experience assessing configurations, access controls, authentication, security settings, system behaviour, logs, audit trails, and monitoring data.<br>&#8211; Solid IAM knowledge, including RBAC, PAM, access governance, and user lifecycle controls.<br>&#8211; Able to evaluate control design and operating effectiveness using direct system evidence.<br>&#8211; Knowledge of IT and cloud security, compliance requirements, internal policies, and frameworks such as ISO 27001, SOC 2, NIST, CIS, and GDPR.<\/p> <p><strong>Analytical Skills<\/strong>: Excellent attention to detail, critical thinking, and problem-solving; able to identify patterns, anomalies, root causes, and risks.<\/p> <p><strong>Interpersonal Skills<\/strong>: Communicates complex findings clearly to non-technical audiences; collaborates effectively across Security, IT, DevOps, Compliance, and Business teams; produces strong documentation, reports, and presentations.<\/p> <p><strong>Experience<\/strong><br>&#8211; Typically 6&ndash;8 years of experience in internal audit, security auditing, IT risk, compliance, or a related field.<br>&#8211; SaaS experience is highly desirable; exposure to security posture reviews<br>&nbsp;&nbsp;<br><strong>Preferred Certifications (Not mandatory, but beneficial)<\/strong><br>&#8211; CISA (Certified Information Systems Auditor)<br>&#8211; ISO 27001 Lead Audit<\/p><\/div>\n\r\n\r\n<h4 class=\"cx_h4 cx2_information\">Information<\/h4>\n<div class=\"cx2_information\"><p>Priya Jha +31(0)20-3337629<\/p><\/div>\n\r\n<h4 class=\"cx_h4 cx2_application\">Application<\/h4>\n<div class=\"cx2_application\"><p>Priya Jha +31(0)20-3337629<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<h4 class=\"cx_h4 cx2_introduction\">Introduction<\/h4>\n<div class=\"cx2_introduction\"><ul> <li>36 hours per week<\/li> <li>Start date: ASAP<\/li> <li>End date: 30 September 2027<\/li> <li>Hybrid working, 1-2 days from the office.<\/li> <li>Travelling abroad is required for this role.<\/li> <li>Candidates have to live in the Netherlands.<\/li> <\/ul><\/div>","protected":false},"author":12,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,106],"tags":[102,108,24],"class_list":["post-12743","post","type-post","status-publish","format-standard","hentry","category-publications","category-security","tag-amstelveen","tag-security","tag-the-netherlands","functiongroups-security","sector-banking","worklocation-amstelveen","country-the-netherlands","procedure-zzp-and-or-contracting","business-line-default","hours-per-week-31","pubid-list-17090"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Information Security Expert (Supply Chain Security Audit) : A2Z-CM<\/title>\n<meta name=\"description\" content=\"36 hours per week Start date: ASAP End date: 30 September 2027 Hybrid working, 1-2 days from the office. Travelling abroad is required for this role. Candidates have to live in the Netherlands.\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"nl_NL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Information Security Expert (Supply Chain Security Audit) : A2Z-CM\" \/>\n<meta property=\"og:description\" content=\"36 hours per week Start date: ASAP End date: 30 September 2027 Hybrid working, 1-2 days from the office. Travelling abroad is required for this role. Candidates have to live in the Netherlands.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.a2z-cm.com\/nl\/information-security-expert-supply-chain-security-audit\/\" \/>\n<meta property=\"og:site_name\" content=\"A2Z-CM\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-16T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-16T16:41:07+00:00\" \/>\n<meta name=\"author\" content=\"Priya Jha\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschreven door\" \/>\n\t<meta name=\"twitter:data1\" content=\"Priya Jha\" \/>\n\t<meta name=\"twitter:label2\" content=\"Geschatte leestijd\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/information-security-expert-supply-chain-security-audit\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/information-security-expert-supply-chain-security-audit\\\/\"},\"author\":{\"name\":\"Priya Jha\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#\\\/schema\\\/person\\\/74b77faa67471541b9630db6bda93200\"},\"headline\":\"Information Security Expert (Supply Chain Security Audit)\",\"datePublished\":\"2026-09-16T00:00:00+00:00\",\"dateModified\":\"2026-09-16T16:41:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/information-security-expert-supply-chain-security-audit\\\/\"},\"wordCount\":501,\"publisher\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#organization\"},\"keywords\":[\"Amstelveen\",\"Security\",\"the Netherlands\"],\"articleSection\":[\"Publications\",\"Security\"],\"inLanguage\":\"nl-NL\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/information-security-expert-supply-chain-security-audit\\\/\",\"url\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/information-security-expert-supply-chain-security-audit\\\/\",\"name\":\"Information Security Expert (Supply Chain Security Audit) : A2Z-CM\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#website\"},\"datePublished\":\"2026-09-16T00:00:00+00:00\",\"dateModified\":\"2026-09-16T16:41:07+00:00\",\"description\":\"36 hours per week Start date: ASAP End date: 30 September 2027 Hybrid working, 1-2 days from the office. Travelling abroad is required for this role. Candidates have to live in the Netherlands.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/information-security-expert-supply-chain-security-audit\\\/#breadcrumb\"},\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/information-security-expert-supply-chain-security-audit\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/information-security-expert-supply-chain-security-audit\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Information Security Expert (Supply Chain Security Audit)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#website\",\"url\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/\",\"name\":\"A2Z-CM\",\"description\":\"Think Global, Act Local\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"nl-NL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#organization\",\"name\":\"A2Z-CM\",\"url\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.a2z-cm.com\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/logo-1.svg\",\"contentUrl\":\"https:\\\/\\\/www.a2z-cm.com\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/logo-1.svg\",\"width\":848,\"height\":444,\"caption\":\"A2Z-CM\"},\"image\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#\\\/schema\\\/person\\\/74b77faa67471541b9630db6bda93200\",\"name\":\"Priya Jha\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"caption\":\"Priya Jha\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Information Security Expert (Supply Chain Security Audit) : A2Z-CM","description":"36 hours per week Start date: ASAP End date: 30 September 2027 Hybrid working, 1-2 days from the office. Travelling abroad is required for this role. Candidates have to live in the Netherlands.","robots":{"index":"noindex","follow":"follow"},"og_locale":"nl_NL","og_type":"article","og_title":"Information Security Expert (Supply Chain Security Audit) : A2Z-CM","og_description":"36 hours per week Start date: ASAP End date: 30 September 2027 Hybrid working, 1-2 days from the office. Travelling abroad is required for this role. Candidates have to live in the Netherlands.","og_url":"https:\/\/www.a2z-cm.com\/nl\/information-security-expert-supply-chain-security-audit\/","og_site_name":"A2Z-CM","article_published_time":"2026-09-16T00:00:00+00:00","article_modified_time":"2026-09-16T16:41:07+00:00","author":"Priya Jha","twitter_card":"summary_large_image","twitter_misc":{"Geschreven door":"Priya Jha","Geschatte leestijd":"2 minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.a2z-cm.com\/nl\/information-security-expert-supply-chain-security-audit\/#article","isPartOf":{"@id":"https:\/\/www.a2z-cm.com\/nl\/information-security-expert-supply-chain-security-audit\/"},"author":{"name":"Priya Jha","@id":"https:\/\/www.a2z-cm.com\/nl\/#\/schema\/person\/74b77faa67471541b9630db6bda93200"},"headline":"Information Security Expert (Supply Chain Security Audit)","datePublished":"2026-09-16T00:00:00+00:00","dateModified":"2026-09-16T16:41:07+00:00","mainEntityOfPage":{"@id":"https:\/\/www.a2z-cm.com\/nl\/information-security-expert-supply-chain-security-audit\/"},"wordCount":501,"publisher":{"@id":"https:\/\/www.a2z-cm.com\/nl\/#organization"},"keywords":["Amstelveen","Security","the Netherlands"],"articleSection":["Publications","Security"],"inLanguage":"nl-NL"},{"@type":"WebPage","@id":"https:\/\/www.a2z-cm.com\/nl\/information-security-expert-supply-chain-security-audit\/","url":"https:\/\/www.a2z-cm.com\/nl\/information-security-expert-supply-chain-security-audit\/","name":"Information Security Expert (Supply Chain Security Audit) : A2Z-CM","isPartOf":{"@id":"https:\/\/www.a2z-cm.com\/nl\/#website"},"datePublished":"2026-09-16T00:00:00+00:00","dateModified":"2026-09-16T16:41:07+00:00","description":"36 hours per week Start date: ASAP End date: 30 September 2027 Hybrid working, 1-2 days from the office. Travelling abroad is required for this role. Candidates have to live in the Netherlands.","breadcrumb":{"@id":"https:\/\/www.a2z-cm.com\/nl\/information-security-expert-supply-chain-security-audit\/#breadcrumb"},"inLanguage":"nl-NL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.a2z-cm.com\/nl\/information-security-expert-supply-chain-security-audit\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.a2z-cm.com\/nl\/information-security-expert-supply-chain-security-audit\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.a2z-cm.com\/nl\/"},{"@type":"ListItem","position":2,"name":"Information Security Expert (Supply Chain Security Audit)"}]},{"@type":"WebSite","@id":"https:\/\/www.a2z-cm.com\/nl\/#website","url":"https:\/\/www.a2z-cm.com\/nl\/","name":"A2Z-CM","description":"Think Global, Act Local","publisher":{"@id":"https:\/\/www.a2z-cm.com\/nl\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.a2z-cm.com\/nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"nl-NL"},{"@type":"Organization","@id":"https:\/\/www.a2z-cm.com\/nl\/#organization","name":"A2Z-CM","url":"https:\/\/www.a2z-cm.com\/nl\/","logo":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/www.a2z-cm.com\/nl\/#\/schema\/logo\/image\/","url":"https:\/\/www.a2z-cm.com\/wp-content\/uploads\/2022\/06\/logo-1.svg","contentUrl":"https:\/\/www.a2z-cm.com\/wp-content\/uploads\/2022\/06\/logo-1.svg","width":848,"height":444,"caption":"A2Z-CM"},"image":{"@id":"https:\/\/www.a2z-cm.com\/nl\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.a2z-cm.com\/nl\/#\/schema\/person\/74b77faa67471541b9630db6bda93200","name":"Priya Jha","image":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","caption":"Priya Jha"}}]}},"_links":{"self":[{"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/posts\/12743","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/comments?post=12743"}],"version-history":[{"count":0,"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/posts\/12743\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/media?parent=12743"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/categories?post=12743"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/tags?post=12743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}