Technical Risk and Compliance Professional

• →

  Support engineering teams in identifying, assessing, and managing technical and operational risks

• →

  Gather, structure, and maintain a clear overview of the technology risk landscape and ownership

• →

  Ensure risk mitigation plans are defined, tracked, and executed effectively

• →

  Translate compliance frameworks (e.g. SOC 2, ISO 27001) into practical engineering processes

• →

  Improve control effectiveness by simplifying, standardizing, and automating controls

• →

  Build scalable and repeatable processes for audit evidence gathering and act as first point of contact for auditors

• →

  Implement continuous monitoring and automation of controls within CI/CD and infrastructure workflows

• →

  Act as the bridge between Engineering, Risk & Compliance, and external auditors

• 5–8 years of experience in IT, DevOps, or Platform Engineering, with experience in  risk, security, or compliance

• Strong understanding of CI/CD pipelines, Git-based workflows, cloud infrastructure (AWS and/or GCP), and Infrastructure as Code

• Hands-on experience with access control, identity management, logging, and monitoring

• Ability to translate compliance requirements into practical engineering implementations

• Experience with SOC 2 and/or ISO 27001

• Strong communication skills, with the ability to work directly with engineers and auditors

• Experience supporting audits from within an engineering or platform team

• A pragmatic mindset and the ability to challenge ineffective or overly complex controls

• Experience automating controls and evidence collection in cloud-native environments

Part of our pay policy is that we offer attractive total remuneration. While some companies may offer higher base salaries, at the RIPE NCC we take pride in offering outstanding secondary benefits that truly set us apart. Beyond the tangible perks, you’ll also gain the invaluable reward of working for a mission-driven organisation, where your contributions have a real and lasting impact on the Internet and the Internet community we serve. 

We offer:

• A modern, flexible and informal work environment in the heart of Amsterdam, with an emphasis on a healthy work/life balance

• A hybrid working policy under which you can combine working from the office with working from home. Working from abroad for a number of days per year is also possible.

The RIPE NCC is a not-for-profit organisation founded on the belief that the Internet should be governed openly, transparently and together with the wider Internet community. We are one of the oldest Internet organisations in Europe and are proud of our legacy.

Our strength is our staff. We bring together more than 180+ people from over 44 countries in our modern, vibrant office in the east wing of Amsterdam Central Station. Currently, we have a hybrid way of working and allow our staff to work from their homes and the office. Our official working language is English, but our colleagues speak more than 30 languages.

Our backgrounds are diverse, but our goal is the same: we work for the good of the Internet. Will you join us?

If interested, please click the ‘Apply’ button and submit your CV and cover letter in English. Adding a cover letter is highly important and appreciated, our team read them carefully. 

Not ready to apply yet? Then send me an email to openings@ripe.net and we can have an informal chat.

At the RIPE NCC, we are proud to serve our members and the RIPE community in 76 countries across Europe, the Middle East and Central Asia. We celebrate unique perspectives and talents from different backgrounds and cultures. So if you're passionate about what you do and want to help shape the future of the Internet, apply now - we'd love to hear your story. 

Please note that due to the nature of our activities, we will require successful candidates to follow a pre-employment screening (conducted by our partner DISA). This involves carrying out a background check and sharing education certificates.