Risk Management & Compliance Specialist

• Location: Driebergen-Zeist (Hybrid), Netherlands
• Start Date: As soon as possible / end of February
• Freelance possible
• For indirect freelance assignments arranged through a supplier, a fee-only agreement is mandatory. Direct engagement of self-employed professionals without an intermediary remains possible.
• Assignment will not start unless the screening on the side of and Triodos is fully completed.

We are seeking a proactive and execution-oriented Risk Management & Compliance Specialist with a strong focus on Operational Risk, Procurement Controls, and Third-Party Risk Management. The ideal candidate is able to drive activities forward independently, create structure in evolving environments, and translate risk and control requirements into practical, well-documented ways of working.

The role requires a hands-on professional with a strong interest in risk management and compliance. The candidate will facilitate collaboration between Procurement stakeholders, subject-matter experts (SMEs), control performers, and second-line Operational Risk Management. The successful candidate will support the strengthening of the Procurement control environment, contribute to Risk Control Self-Assessments (RCSAs), and help demonstrate compliance with DORA requirements.

Key Responsibilities

• Operational Risk & Key Control Documentation: Review and improve existing work instructions for the eleven key controls within the Procurement function. Ensure that instructions are clear, practical, and fit for purpose, providing evidence of the design and existence of the controls.
• Control Prerequisites & Stakeholder Facilitation: Identify and coordinate the prerequisites required for effective control execution, such as checklists, decision trees, and supporting templates. Consult relevant SMEs, document agreed prerequisites under their guidance, and facilitate discussions with control performers to collect and incorporate feedback.
• Key Control Test Instructions: Develop test instructions for Procurement key controls, aligned with the respective work instructions. Coordinate with second-line Operational Risk Management to incorporate feedback and support a smooth control-owner attestation process, including tests of design.
• RCSA Support for Procure2Pay: Support the execution of Risk Control Self-Assessments for new Procure2Pay processes, in close cooperation with the Sustainable Procurement & Compliance Manager. Activities may include participating in process walkthroughs, completing RCSA working papers, processing feedback from second-line Operational Risk Management, and preparing documentation for RCSA closing meetings.
• DORA Compliance Evidence: Collect, organize, and document evidence demonstrating the design and existence of processes and controls that support the implementation of DORA requirements in new Procurement and Procure2Pay processes.
• Third-Party Risk Management: Advise on suitable methods and approaches for assessing the supply chains of critical suppliers. Develop practical templates and work instructions to support consistent and effective supplier supply-chain assessments.
• Procurement Classification Support: Support ongoing sourcing activities by providing appropriate Procurement classifications and ensuring that sourcing initiatives are categorized consistently and in line with relevant risk, compliance, and Procurement requirements.

Candidate Profile
The successful candidate will demonstrate strong organizational and analytical skills, a pragmatic approach to risk and control management, and the ability to translate requirements into clear, practical, and well-structured documentation. Experience in Procurement, operational risk, compliance, internal controls, or third-party risk management is highly valued.

Qualifications

• Certification, Bachelor's degree, or Master's degree in Risk Management, Compliance, or a related field.

… lees de volledige omschrijving bij De Publieke Partner.