Risk & Quality Management Advisor

Do you enjoy further professionalizing quality and compliance processes? Do you prefer a risk-based approach, with processes that align with SURF’s innovation-driven way of working? Do continuous improvement processes spanning various disciplines—such as privacy and security—get your heart racing? Do you tackle these in a structured manner, following an integrated approach and methodology? Then we’re looking for you! 

Where you will work

SURF is the ICT cooperative for Dutch educational and research institutions. Together with them, we work on digital services and complex innovation challenges to enhance the quality of education and research.

Working at SURF means working for a unique and open organization. This is evident in everything: the structure of the organization, the setup of the project teams, the culture in our offices, and the atmosphere among colleagues. SURF offers excellent terms of employment and a flexible approach to work/life balance. Employees enjoy working independently. In addition, everyone is given the space and freedom to use and develop their talents as effectively and broadly as possible.

The team you will join

You’ll be working on the Quality & Risk team: for us, the word “quality” is the positive interpretation of “compliance.” At SURF, we do things right because we want to (quality), not because we have to (compliance). This team consists of 12 people: all second-line officers and advisors in the areas of security, privacy, AI, and CSR. These include the corporate “consciences”—such as the CISO and CPO—as well as the direct business partners of our service and innovation teams.

Our manager acts as a hands-on leader: he is responsible for integrated risk management within SURF and drives an integrated quality approach.

SURF has grown rapidly in recent years, but processes have not kept pace—and we are now working hard to address that. The approach, which was once suitable for 100–150 employees, no longer fits SURF’s current workforce of over 750 employees. Over the past year, we have worked hard to establish a solid foundation for both an integrated approach to quality processes and the professionalization of our risk management and risk-based working. That work is far from complete, which is why we are now looking for someone to continue this work with us.

What you will do

Over the past year, we have laid the groundwork for a risk-based approach within SURF. Our philosophy is that this increases the likelihood that we will achieve our organizational goals. Risk management—and especially the discussion of risks and uncertainties—still has a long way to go. Much progress has been made in recent years; the next step is to ensure that risk management becomes an integral part of our regular planning, control, and decision-making processes.

In this role, you will work closely with the team leader. He is responsible for the vision, governance, and priorities, and serves as the primary point of contact for risk discussions with the management team and the Board of Directors. You will be responsible for:

• Leading risk workshops for business units, management teams, and individual teams;
• Setting up a risk dashboard and subsequently maintaining it;
• Providing training in the field of risk management;
• Coordinating the four monthly reports from the Q&R team;
• You will also serve as the liaison between the front line and, for example, the portfolio committee.

Other team members are experts in their respective fields (e.g., security and privacy), but you can contribute ideas on all topics and oversee where disciplines overlap. You’ll also help integrate the various quality themes. For example, we want to align ISO 3100 with ISO 27001 and incorporate AI and privacy into the existing ISO 27001 management system.

Your skills and experience

• You have a relevant interest in and experience with the topics covered in Q&R, and you have a particular interest in security, AI, and privacy;
• You can quickly familiarize yourself with risk topics and new content;
• You have demonstrable experience setting up and managing a risk and quality management system (such as COBIT, ISO 9001, ISO 3100, ISO 27001, etc.) and take a pragmatic approach;
• You can communicate at various levels and in different ways: you advise the board and management, as well as colleagues responsible for the many services SURF offers;
• You have demonstrable experience in an innovative IT organization;

Prior to starting this job, a VOG must be presented.

SURF takes pleasure in doing its recruitment itself; acquisition is therefore not appreciated.