Security Champion – Tech4HR

• Salary: Gross monthly salary between EUR 5,876 and EUR 8,395 (scale 10) for a 36-hour work week.
• Extras: a thirteenth month, 8% holiday allowance, and a 10% Employee Benefit Budget.
• Development budget: EUR 1,400 development budget per year for your growth and development.
• Hybrid working: a balance between home and office work (possible for most roles).
• Pension: decide for yourself the amount of your personal contribution.

Or view all our benefits.

You strengthen the digital resilience of Tech4HR by shaping security maturity across a critical technology domain that supports thousands of employees every day.

Drive security excellence by acting as the Security Champion for Tech4HR, advising teams on secure design, risk-aware decision-making and practical implementation of security standards. As Security Champion, you translate strategy into action, connect stakeholders across domains and help engineers embed security into daily work.

• Strengthen security maturity by translating Tech4HR-specific risks into practical controls aligned with bank-wide standards.
• Improve decision-making by supporting teams with design reviews, threat assessments and risk evaluations.
• Promote security awareness by clearly explaining the “why” behind security requirements to engineers and stakeholders.

• 36 hours per week.
• 7+ years of demonstrable cybersecurity experience is required for the role.
• Nearly 2 million members worldwide.

• Lead the coordination between Tech4HR, central security teams and the CISO office to ensure aligned security priorities and consistent implementation.
• Act as a trusted sparring partner on high-risk and strategic topics such as emerging technologies, including generative AI and new cyber threats.
• Build and mature cross-domain collaboration by actively contributing to and growing the security guild across E&E Tech.

Drive improvements in security maturity, collaboration and awareness while operating at the intersection of technology, risk and governance. This role sits within Tech4HR and maintains a strong functional connection to central security teams.

We believe in the power of differences. It is precisely by combining people’s differences that we become an even better bank. We are curious about what you add to our Tech4HR team.

The people of Tech4HR are responsible for workplace services, facilities systems and HR applications. Collaboration is our approach; as one driven and professional team within Rabobank, we work every day on a secure and seamless employee experience.

For us, your development and that of society go hand in hand. That’s why we invest in you and work together for a better world. At Rabobank, you work on yourself and the world around you at the same time.

At Rabobank, we believe we become stronger through people who complement each other. By embracing our differences, we bring out the best in one another. Across every department, we strive for diversity, inclusion and the freedom to be yourself – whoever you are.

• 7+ years of cybersecurity experience covering both strategic and technical domains.
• Proven experience with security engineering, risk management and regulatory compliance.
• Experience advising teams on secure design and architecture within complex IT environments.
• Hands-on experience with modern technology stacks and security tooling in enterprise environments.
• Strong analytical skills with the ability to assess and prioritise security risks.
• Excellent communication skills, able to translate complex security topics into clear language.
• Ability to influence stakeholders at multiple levels across tech and governance.
• Proactive mindset; you take initiative beyond defined checklists.
• Fluent in English; Dutch is a plus.

Instead of a motivation letter we ask the you answer a few questions. If you do not answer these questions we will not consider your application.

Question 1

You’re contacted by one of Tech4HR’s engineering squads, stating they need an exemption to a mandatory security policy. The team claims that adhering to the policy requirement is negatively impacting their operations and state that their specific use case is unique. This specific security topic is not something that you’re very familiar with.

Explain briefly what you would do in this situation. In your response, please reference past professional or personal experience that you would draw from.

Question 2

As a security champion, one of your key responsibilities is maturing the Tech4HR’s security awareness and processes. You’re starting from scratch and have heard anecdotally that the engineering teams generally find security work to be important, but cumbersome and boring.

Briefly outline how you would approach designing a security awareness and engagement program for the domain. Please reference past professional experiences where possible.

Question 3

Tech4HR is exploring new applications to support staff collaboration. One system is preferred by your leadership. They have given the go-ahead to onboard it as it is cost-effective and solves many ongoing technical issues. However, during discussions with the tech leads, you realise that the preferred solution is incompatible with at least one of Rabobank’s security policies.

Briefly explain what you would do in this situation, referencing past professional experiences.

You can apply for the Security Champion vacancy at Rabobank
• Questions about working at Rabobank and the process? Raphael.Drenthel@rabobank.nl (CVs or applications sent directly to this email address will not be considered)
• If you are invited for an interview, Bo, our virtual assistant, will contact you via SMS and email to schedule it.
• Answers to frequently asked questions can be found at rabobank.jobs/nl/veelgestelde-vragen.
• A reliability check is part of the procedure.
• We respect your privacy.