Associate Director, Technology Risk Strategy & Transformation

Location: Amsterdam  

Language: English required, Dutch knowledge is a bonus 

A little bit about us 

Riverflex was founded in Amsterdam and London in 2018 and has grown into a global team of consultants united by one mission: help courageous leaders drive intelligent transformation. We integrate three service pillars - strategy & transformation consulting that Creates Change, talent services that Build Teams, and business-accelerating AI products that Augment Intelligence. 

We are not a traditional consultancy. We work at C-level with blue-chip companies on the programmes that actually matter, and we are building our Technology Risk practice at exactly the moment the market needs it most.  

Your role as Associate Director, Technology Risk Strategy & Transformation 

This is a senior client-facing role at the heart of Riverflex's S&T practice. You will lead technology risk advisory engagements end-to-end - developing risk strategies, target operating models and regulatory transformation roadmaps for clients navigating DORA, NIS2, AI Act and beyond. You will hold C-level relationships, carry a personal sales target, and have a clear path to Director within 12–18 months. 

What you’ll do 

• Lead tech risk strategy and transformation engagements for blue-chip clients in FS and Retail - from initial diagnosis through to delivery oversight 

• Develop credible risk strategies and operating models that meet regulatory expectations and stand up to board scrutiny 

• Work across the pillars of cyber strategy, IT controls, third-party risk, GRC operating models, DORA/NIS2/AI Act compliance programmes 

• Build and own executive narratives - you write the board-level story and you defend it in the room 

• Originate and grow client relationships - €1m personal sales target in year one, with founder support behind you 

• Contribute to practice development: methodology, IP, and team capability 

Who you are 

• 10+ years of experience, with at least 5 years in management consulting at a recognised firm (Big 4 Risk Advisory, specialist boutique, or in-house from a regulated environment and ready to return to consulting) 

• Proven track record leading tech risk advisory engagements - strategy, controls, regulatory programmes, third-party risk 

• Substantive knowledge of the EU regulatory landscape: DORA, NIS2, AI Act, GDPR - you know the detail, not just the acronyms 

• Comfortable at C-suite level: you hold your own with CISOs, CTOs and boards without a director in the room 

• Quantitatively credible: risk quantification, control investment business cases, prioritisation frameworks 

• Financial Services background strongly preferred; Retail a real asset 

• EU-eligible or open to a Dutch highly skilled migrant visa - we sponsor. 30% ruling support available. 
  

What we offer 

• A competitive compensation package. 

• 25 days off per year, plus a full week off between Christmas and New Year. 

• Flexible work from abroad for up to 6 weeks per year. 

• Pension scheme to help you plan for your future.   

• Learning & Development budget, including full access to all Udemy courses. 

• ClassPass membership. 

• Access to the latest tools: ChatGPT Pro, Claude, Notion, Sembly, SlideHub and Riverflex's in-house developed software. 

• Equity share scheme for long-term team members. 

• A clear path to Director with profit-share upside 

Why join now? 

Riverflex is growing its Technology Risk practice at the exact moment the market is moving. DORA is live, NIS2 is biting, and the AI Act is reshaping every CISO's agenda. You will step in with real client demand behind you, founder-level backing, and the autonomy to build something, not just fill a seat. 

To apply, send your CV and a short note on a tech risk or regulatory programme you've led that you're proud of.