Apply for this job

We collaborate with best-in-class platforms, consultants, and technology providers to deliver seamless, future-proof solutions, built to grow with your organization.

Download Whitepaper

We collaborate with best-in-class platforms, consultants, and technology providers to deliver seamless, future-proof solutions, built to grow with your organization.

Governance, Risk & Compliance for financial institutions

Manage risks and controls without spreadsheets. One GRC platform for banks, insurers and pension funds, built for European regulation such as DORA.

GRC challenges

Risk and control data often lives in spreadsheets and disconnected systems. That leads to:

  • Fragmented registers that hide trends and duplication.
  • Scores that stay the same when the impact changes.
  • Risk appetite breaches that surface too late.
CERRIX GRC platform

All risk and control data in one place, scored and continuously in view:

  • Preloaded taxonomies for consistent classification.
  • Quantitative and qualitative risk scoring.
  • Instant alerts on breaches, audit-ready by design.

Trusted by 100+ clients in 20+ countries

One platform for every perspective

Risk and compliance is no longer a box-ticking exercise. It is a strategic function, and it demands an equally strategic platform. CERRIX gives every stakeholder in your organisation a personalised view, tailored to their role and responsibilities. One platform, every perspective, built for financial institutions that need more than a spreadsheet.

‍

A smarter way to govern risk and controls

CERRIX brings risks, controls, risk appetite and trends together in one workspace. Your teams get the overview and context to make well-informed decisions, and everything is ready for audit.

Intelligent risk taxonomies

Multi-level risk taxonomies

Pre‑configured structures clarify classification across entities, ensuring every risk is captured, categorized, and managed consistently. This reduces ambiguity and strengthens oversight across complex operations.

Dynamic risk scoring

Adjust quantitative or qualitative models in seconds when exposure changes, so every score stays current.

Risk time-travel analysis

Risk time-travel analysis

See how risks develop over time, so you spot trends and adjust course earlier.

Align with risk appetite

See at a glance whether risks stay within your strategic goals and thresholds.

integrated risk management

Integrated risk management

Link risks to controls, processes, projects and regulatory frameworks.

Solving real-world GRC challenges with one smart platform

Aligned stakeholders across risk, compliance, and audit

Reliable data that supports better decisions

Tailored configuration that matches your governance frameworks

Phased onboarding that reduces risk and accelerates adoption

GRC implementation that goes beyond tool setup

Rolling out GRC implementation is more than launching software. It’s about creating clarity in your processes, consistency in your data, and aligning and motivating all 3 lines to work together. At CERRIX, we guide you through every step.

Configuration completed in one month
Stakeholder-specific dashboards
Cross-country risk and control data

Understand, align, prepare

We begin by forming a strong foundation:

Define objectives, scope, and success criteria
Conduct kickoff & initial training
Engage all key stakeholders from day one
Prepare your governance, communication, and milestone plans

Configure, Customize, Validate

We tailor the platform to your organization’s needs:

Configure your organization, frameworks, and metadata
Align configuration with your policies and risk strategy
Prepare and review data for quality and consistency
Set up reporting dashboards and user access

Test, Train, Launch

We ensure your team is ready to succeed:

Run acceptance testing with full coverage
Conduct role-based user training
Set the official go-live date
Announce internally and provide go-live support

Evaluate, Improve, Expand

Post-go-live, we help you evolve:

Collect lessons learned and evaluate
Refine configuration based on feedback
Plan next steps for continuous improvement
Expand to other business units or use cases

See how clients use CERRIX

How Blauwtrust Groep centralized its control framework in CERRIX GRC Platform

“CERRIX has given us overview, insights and structure. It allows us to demonstrate control in a way that is consistent and efficient, and it supports the way our governance framework continues to evolve.”

How VGZ Strengthens Risk & Compliance Operations with CERRIX

VGZ uses the CERRIX GRC platform to bring core activities, such as control testing, incidents, MoIs, findings and risks, into one environment.

Transforming Compliance: How Menzis Gained Efficiency and Real-Time Insights with CERRIX

Menzis, one of the largest healthcare insurers in the Netherlands, seeking an integrated and automated GRC solution to streamline compliance, enhance risk oversight, and improve operational efficiency.

Structuring Risk and Audit Across Teams: Haier Europe’s Journey

Haier Europe’s approach to risk and audit transformation with CERRIX.

Transforming Risk Culture: How Stater Strengthened First-Line Ownership and Assurance with CERRIX

Stater’s journey to first-line risk ownership and assurance with CERRIX.

Enterprise-grade security

Data protection

ISO/IEC 27001 certified, in line with the international standard for information security.

Control assurance

ISAE 3402 Type II: our internal controls are independently audited.

Financial sector readiness

FSQS-NL registered and pre-qualified for procurement by banks and insurers in the Netherlands.

Multi-level taxonomies preloaded.
Quantitative scoring enabled.
Appetite breaches flagged fast.