Consultant Operational Risk & Compliance - Temporary

Context

We are looking for an external consultant for temporary reinforcement of the first line within a leading financial securities firm, focusing on operational risk management, compliance-related risks, and monitoring of the internal control framework. The consultant will take a hands-on role in executing and documenting first-line controls, analyzing and improving processes, identifying operational and compliance risks, and developing pragmatic measures to prevent or mitigate these risks.

The consultant must be able to independently challenge risks and controls, clearly document findings, follow up on action points, and report in a structured manner to management. The role requires good knowledge of operational risk management and compliance domains such as AML, GDPR, outsourcing, DORA, third-party risk management, product approvals, and business continuity. Knowledge of MetricStream or another GRC platform is essential, as the consultant will be responsible for registering, following up, and reporting controls, risks, findings, and action points in this tool.

Ideally, the consultant has experience in a regulated financial environment, preferably within a bank, securities company, or other financial institution. They combine an analytical and critical mindset with a practical, solution-oriented approach and have sufficient communication skills to interact with business stakeholders as well as risk, compliance, and management.

Missions

The assignment includes, among others:

• Executing, documenting, and following up on first-line controls on operational and compliance risks.
• Analyzing existing processes, identifying weaknesses, and formulating concrete improvement actions.
• Identifying and assessing operational and compliance risks, including domains such as outsourcing, DORA, third-party risk management, product approvals, business continuity, AML, and GDPR.
• Developing feasible measures to prevent, limit, or better control identified risks.
• Implementing, coordinating, and following up on action points arising from risk assessments, controls, incidents, audits, developments in outsourcing/DORA/third-party risk, group exercises, or management decisions.
• Supporting the further strengthening of the internal control framework within the first line.
• Registering, following up, and reporting risks, controls, findings, and action points in MetricStream.
• Preparing clear management reporting on risks, controls, open actions, bottlenecks, and progress.
• Acting as a sparring partner for the business on questions regarding non-financial risks, control requirements, and compliance-related issues.
• Contributing to increased risk awareness within the organization by translating risks and requirements into understandable and practical terms for the business.

Tools & Environment

• MetricStream or other GRC platforms
• Domains: AML, GDPR, outsourcing, DORA, third-party risk management, product approvals, business continuity

Working Conditions

• External consultant role
• Temporary assignment
• Focus on first-line operational risk and compliance within a regulated financial environment

1. Proven experience in operational risk management, internal control, or compliance within a regulated financial environment
2. Practical knowledge of first-line controls, risk assessments, action tracking, and management reporting
3. Knowledge of domains such as outsourcing, DORA, third-party risk management, AML, GDPR, product approvals, and business continuity
4. Experience with MetricStream or another GRC platform is a must
5. Experience in documenting and following up on findings, controls, and action plans
6. Structured and accurate working style
7. Critical but constructive attitude with the ability to challenge processes and controls
8. Strong communication skills in Dutch and English
9. Ability to work independently, prioritize, and collaborate with various stakeholders
10. Hands-on mentality