BLUE HARRIERMANAGEMENT CONSULTANCY

Independent advisor  ·  Data · Risk · AI governance  ·  Rotterdam

If it doesn’t add value, it’s noise.

I’m Jeroen de Jong. For fifteen years I’ve helped large banks turn data, risk and AI regulation into decisions a board can take and a team can deliver. Now I do it independently, as an advisor or as your interim lead.

The edit
noise removed

Most consulting copy sounds like the left column. Here’s the right one.

  1. Regulatory data

    Holistic, end-to-end regulatory data transformation

    Narrowed 200+ candidate regulatory reports to the 2 that mattered, with business terms, critical data elements and lineage for each.

  2. Controls

    Best-in-class governance frameworks

    A BCBS 239 control roadmap across 40 countries. Approved by the supervisor. Assurance effort down 60%.

  3. AI

    Leveraging AI to unlock value at pace

    A semantic search engine that turned data requests from weeks into hours, scaled from a Dutch pilot to global use.

  4. Risk

    Harmonising the global risk landscape

    One risk register, taxonomy and control library for 28 countries, replacing 28 regional views.

  5. Delivery

    Accelerating time-to-value

    An implementation model that cut ERP rollouts from months to two weeks.

Services
three practices

Where I’m useful.

Regulated organisations with a data, risk or AI problem that won’t stay solved. Banks and insurers first, plus the industrial and public-sector work from my consulting years.

Marquee sign reading: This is the sign you’re looking for
Signal, not noiseField note
Data management

Data you can defend in front of an auditor.

Operating models, ownership, data quality and lineage that people follow after the consultants leave. I start from the few data elements your decisions actually depend on.

“Which of our data is critical, who owns it, and can we prove it’s right?”

  • DAMA-DMBOK
  • BCBS 239
  • GDPR
  • CSRD data
  • Collibra
Risk management

Risk information that informs decisions.

Non-financial risk frameworks, controls and reporting built as an independent input to decision-making. From control design to the conversation with your supervisor.

“Our framework looks complete on paper. Why doesn’t anyone use it?”

  • Operational risk
  • DORA
  • NIS2
  • IBM OpenPages
  • SAP GRC
AI governance & enablement

From pilot to production, with governance built in.

AI controls, EU AI Act readiness and the delivery work to scale a promising pilot. I’ve taken three AI products from proof of concept to global rollout, so the governance I design is the kind delivery teams can live with.

“We have twelve pilots. How do we get two into production, safely?”

  • EU AI Act
  • AI control framework
  • Databricks
  • Azure
Two ways to hire me

As an advisor

Assessments, roadmaps and second opinions. Short and sharp, before the regulator or the budget cycle forces the issue.

As an interim lead

Programme manager or lead role when you need someone to own the outcome, run the delivery board and take the hard calls.

Selected work
2006 – 2026

What it looked like in practice.

200+ → 2Candidate reports narrowed
to confirmed scope

ING · Group-wide · 40 countries

BCBS 239, rebuilt from the ground up

I ran the group’s risk data control roadmap end to end, with the Chief Data Office, IT, independent validation and internal audit. We redesigned data and AI governance into a federated model so mandates stopped colliding.

  • Supervisor-approved roadmap, with assurance effort down 60%.
  • A data community across every data role that runs quality monitoring and remediation without overloading one team.
  • Data-sharing agreements and control status built into senior management reporting.
  • A €6m run-and-change IT budget, prioritised through one delivery board.

weeks → hoursData-request turnaround
with semantic search

ING · Netherlands to global

Three AI products, pilot to global rollout

I owned each roadmap from proof of concept to operational handover: data readiness, model development, integration and security across domains.

  • Semantic search. Data requests answered in hours instead of weeks.
  • Product portfolio monitoring. Anomaly detection across all 180 Dutch banking products, then scaled across Retail, Wholesale and support functions worldwide.
  • Reference data mapping. Feasibility showed a 50× efficiency gain at 85% confidence; the MVP was demonstrated to regulators.

28 → 1Regional risk views
into one register

ING · Retail & Wholesale · 28 countries

One GRC platform, one view of risk

I led the IBM OpenPages rollout across head office and 28 network countries. Local registers, taxonomies and control libraries became one comparable register with one reporting line.

In the same role I embedded the operational risk capital model across business lines, turning a periodic manual exercise into a repeatable, audit-ready routine.

€1m+Verified savings from
portfolio risk oversight

Atos Consulting · SNS Reaal · 2006 – 2010

Consulting across three sectors

Sales and delivery in one role, across financial services, industry and the public sector.

  • Loodswezen. SAP GRC as audit and risk platform; a proof of concept won over sceptical senior stakeholders.
  • Novis International. Full SAP GRC suite to reach SOX compliance.
  • Epson Europe. ERP and CRM rollouts cut from months to two weeks.
  • SNS Reaal. Portfolio-level risk visibility for a transformation programme, with over €1m in verified savings.

Approach
how a harrier hunts

Fly low. Listen first. Then commit.

Harriers search a field in slow, low sweeps and find their prey by ear as much as by sight. It’s a decent model for walking into an organisation.

A harrier gliding low with its head turned down, scanning the ground
Field note

A harrier working low over open ground. Head down, listening.

  1. 1

    Quarter the field

    Methodical sweeps before any conclusion. Current state, target state and every line of defence.

  2. 2

    Listen

    The first weeks go to the people who own the problem: business, risk, audit, IT and, where it helps, the regulator.

  3. 3

    Hover

    Rank everything by regulatory and business impact. Most of the list is noise. We agree on what isn’t.

  4. 4

    Strike, then hand over

    Deliver the few things that matter, embed them and hand them to an owner. I leave when it runs without me.

Record
twenty years, in order

Built inside the institutions I now advise.

  1. 2026
    Founder, Blue HarrierIndependent

    Advisory and interim leadership in data, risk and AI governance.

  2. 2020
    Lead Digital & DataING · International

    Digital, data and AI strategy and portfolio. BCBS 239 programme. AI deployment.

  3. 2014
    Data Intelligence LeadING · Netherlands

    Built the team. BI and AI roadmap. Board reporting for NL/BE risk governance.

  4. 2010
    Global Risk ManagerING · International

    GRC platform, capital model and risk oversight across four regions.

  5. 2007
    Lead Business & IT ConsultantAtos Consulting

    Origination and delivery across financial services, industry and public sector.

  6. 2006
    Programme & Project Risk ManagerSNS Reaal

    Risk management across a transformation portfolio.

Education

  • MSc Informatics · HU University Utrecht
  • BBA · INHolland Alkmaar
  • CDMP · DAMA NL, in progress
  • Leadership Programme · Nyenrode, 2026
  • Influence & Negotiation · MIT Sloan
  • High Performance Teams · Cambridge
  • Decision-Making using Data · Cambridge
  • PRINCE2

Supervisors I’ve worked with

DNB · AFM · ECB / JST

Tools of the trade

Collibra · Informatica · Databricks · Azure · IBM Knowledge Catalog · IBM Watson · IBM OpenPages · SAP GRC · Cognos · Power BI · ServiceNow

Languages

Dutch · English

Contact · Rotterdam, working across the Netherlands and Europe

Bring me the problem that keeps coming back.

A finding from the regulator. A programme that’s stuck. An AI pilot that won’t leave the lab. Send two lines and I’ll tell you straight whether I can help.