Governance & ICT Risk Manager

Personio; Berlin; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Benefits dieser Stelle

Ownership from day one

Dynamic startup environment

Personal development budget

30 vacation days

Subsidies for BVG and UrbanSportsClub

1:1 language classes (German & English

Zusammenfassung

bonify is seeking a Governance & ICT Risk Manager to lead enterprise and ICT risk activities, third-party governance, and business continuity efforts in a regulated fintech environment. You will coordinate cross-functional governance inputs, maintain controls, and drive improvements with AI and automation where it adds value.

The role requires 3–5 years in governance or risk management, strong analytical skills, German (C1) and professional English, and willingness to work from the Berlin

Qualifikationen

• 3–5 years of experience in governance, risk management, ICT risk, third-party risk, business continuity or a comparable role in a regulated or compliance-driven environment.
• Strong analytical and communication skills; able to understand complex topics, ask the right questions, identify risks and translate into next steps.
• A curious and open mindset; understand how things work before conclusions and comfortable challenging assumptions.
• Sound judgement; distinguish routine topics from issues requiring deeper assessment or escalation.
• Hands-on and structured working style with ownership of operational processes and follow-up.
• Ability to work cross-functionally with Product, Tech, Information Security, Risk, Compliance, Legal, Privacy and other stakeholders.
• Practical interest in AI and automation and how they can improve governance and risk management workflows.
• Experience with tools such as Jira and Confluence, or comparable workflow and documentation tools.
• German at C1 level and professional English.
• Willingness to work regularly from our Berlin office.

Aufgaben

• Coordinate enterprise and ICT risk activities– support identification, assessment, documentation and follow-up of risks, with ICT risks embedded in the broader enterprise risk framework.
• Coordinate and operate Outsourcing & ICT Third-Party Governance– manage lifecycle from provider intake and assessment through monitoring, reassessment, changes and exit, with close collaboration with business owners and control functions.
• Coordinate business continuity and operational resilience activities– coordinate BIA reviews, continuity planning and resilience testing.
• Coordinate governance input into the New Product Process (NPP) and relevant changes– ensure stakeholders are involved early and assessments and decisions are completed at the right stage.
• Run the related governance processes– maintain registers, documentation, evidence and decision trails, coordinate recurring reviews and ensure actions are followed through.
• Continuously improve governance processes– simplify processes, improve tooling and use AI and automation where they add value.

Kenntnisse

Analytical skills

Communication skills

Curious mindset

Hands-on working style

Cross-functional collaboration

AI & automation interest

Jira

Confluence

German (C1)

Professional English

Tools

Jira

Confluence

Jobbeschreibung

About us

Join bonify, Germany’s leading platform for credit scoring and financial management. We are on the mission to revolutionize the FinTech industry and make the credit score and financial data available and transparent for our users.

We are looking for aGovernance & ICT Risk Managerwith strong analytical and communication skills, a curious, non-judgmental mindset, sound judgement and a hands-on approach.

You will help us run and continuously improve our risk and governance processes in a regulated fintech environment. You should be comfortable working through complex topics, understanding how things work in practice, connecting the dots across different areas and turning them into clear actions and decisions.

AI and automation are part of how we work, where they add value. We want to reduce unnecessary manual work and make our governance processes more efficient.

Your tasks

• Coordinate enterprise and ICT risk activities– support the identification, assessment, documentation and follow-up of risks, with ICT risks embedded in the broader enterprise risk framework. Ensure relevant risks, dependencies and actions are consistently captured, followed up and escalated where needed.

• Coordinate and operate our Outsourcing & ICT Third-Party Governance– manage the lifecycle from provider intake and assessment through monitoring, reassessment, changes and exit, working closely with business owners and relevant control functions.

• Coordinate business continuity and operational resilience activities– coordinate BIA reviews, continuity planning and resilience testing.

• Coordinate governance input into the New Product Process (NPP) and relevant changes– ensure required stakeholders are involved early and that required assessments and decisions are completed at the right stage.

• Run the related governance processes– maintain registers, documentation, evidence and decision trails, coordinate recurring reviews and ensure agreed actions are followed through.

• Continuously improve how governance works– simplify processes, improve tooling and use AI and automation where they genuinely improve quality, consistency or efficiency.

Requirements

• 3–5 years of experiencein governance, risk management, ICT risk, third-party risk, business continuity or a comparable role in a regulated or compliance-driven environment.

• Strong analytical and communication skills.You can understand complex topics, ask the right questions, identify relevant risks and dependencies and translate them into clear next steps.

• A curious and open mindset.You want to understand how things work before reaching conclusions and are comfortable challenging assumptions and asking questions.

• Sound judgement.You can distinguish routine topics from issues that require deeper assessment, specialist input or escalation.

• A hands-on and structured working style, with strong ownership of operational processes and follow-up.

• The ability to work cross-functionallywith Product, Tech, Information Security, Risk, Compliance, Legal, Privacy and other stakeholders.

• A practical interest inAI and automationand how they can improve governance and risk management workflows.

• Experience with tools such asJira and Confluence, or comparable workflow and documentation tools.

• German at C1 leveland professional English.

• Willingness to work regularly from ourBerlin office.

What we offer

As part of the bonify team, you'll have:

• The opportunity to take ownership from day one

• The chance to thrive in a dynamic and flexible startup environment.

• Access to extensive coaching and training programs through our personal development budget

• 30 vacation days

• Subsidies for BVG and UrbanSportsClub

• 1:1 language classes in both German and English.

The Company is committed to the principle that no employee or job applicant shall receive unfavourable treatment on grounds of age, disability, gender reassignment, race, religion or belief, sex, sexual orientation, marriage or civil partnership, pregnancy, and maternity.

Please note, to be compliant with AML Offices, due to the specifics of fintech industries additional background checks are required (applicableonly at the offer stage).