ICT GRC - Junior Associate

N26 Inc.; Berlin; Hybrid; EUR 45,000 - 65,000; Full time

Benefits offered by this job

Personal development budget

Work from home budget

Discounts for fitness & wellness

Language apps

Public transportation

Job summary

N26 Inc. in Berlin is seeking a driven Junior Associate to join its ICT GRC team. You will support audit readiness, risk assessment, and third‑party risk management, contributing to IT controls and documentation.

You will collaborate with risk and compliance professionals, apply regulatory frameworks, and help produce risk reports and dashboards. English fluency is required; German is a plus. A completed degree and 1–2 years of relevant experience are expected.

Qualifications

• Completed degree in IT, CS, InfoSec, or related field.
• 1–2 years of relevant information security, IT risk, audit or compliance experience.
• Foundational understanding of ISO 27001, NIST, DORA, GDPR and IT concepts.
• Interest in cybersecurity, IT risk, IT compliance and governance in digital banking.
• Professional certifications are advantageous.

Responsibilities

• Coordinate audit preparations by gathering evidence and logs.
• Execute IT control tests and document results.
• Draft and maintain risk reports, dashboards, and presentations.
• Review risk assessments of tools and processes.
• Manage risk/gap items in GRC systems and drive remediation.
• Facilitate meetings and maintain documentation in repositories.
• Improve GRC materials: templates, policies, FAQs, docs.
• Assess vendor risk requests and escalate critical risks.
• Draft assessment summaries and risk recommendations.
• Maintain central risk system data quality.

Skills

Analytical thinking

Data management (Excel/Sheets)

GRC tools (OneTrust)

JIRA

Confluence

Regulatory knowledge

Communication

Hybrid teamwork

Education

Bachelor’s or Master’s degree in Information Technology, Computer Science, Information Security, Business Informatics, Engineering, or related field

Tools

OneTrust

Jira

Confluence

Excel

Google Sheets

Job description

About the opportunity

Are you ready to accelerate your career in IT Security? We're looking for a driven and detail-oriented Junior Associate to join our ICT GRC (Governance, Risk, and Compliance) team. In this role, you will play a critical part in executing key activities that help us manage IT risks, coordinate audits, ensure compliance with internal and external requirements, and drive outsourcing security assessments.

You'll work closely with experienced risk and compliance professionals, taking ownership of core processes in audit readiness, risk assessment, continuous reporting, and third-party risk management.

In this role, you will:

• Coordinate audit preparations by gathering critical evidence, managing stakeholder requests, and maintaining accurate audit logs.
• Execute IT control tests to evaluate the effectiveness of internal controls, documenting results and identifying areas for improvement.
• Draft and maintain risk reports, presentations, and dynamic dashboards for management visibility.
• Review risk assessments on tools and internal processes, ensuring all required documentation is accurately evaluated.
• Manage and track risk and gap items in systems like GRC tools, driving remediation efforts with relevant stakeholders.
• Facilitate team and stakeholder meetings, capturing key decisions and maintaining structured documentation in shared repositories.
• Optimize internal GRC materials, including templates, FAQs, policies, and process documentation.
• Assess and prioritize incoming vendor risk requests, ensuring SLAs are met and critical risks are escalated appropriately.
• Draft comprehensive assessment summaries and risk recommendations for management review.
• Help maintain the central risk system, ensuring a high standard of data quality for all documentation and assessment outcomes.
• Ensure policies and procedures owned by ICT GRC are updated based on review cycles by connecting with the right stakeholders within and outside the team.

What you need to be successful

Background:

• A completed Bachelor’s or Master’s degree in Information Technology, Computer Science, Information Security, Business Informatics, Engineering, or a related field.
• 1 to 2 years of relevant work experience (including robust internships or working student roles) in information security, IT risk management, IT audit, or compliance, ideally within banking or the wider financial services industry.
• A solid foundational understanding of regulatory frameworks and standards (e.g., ISO 27001, NIST, DORA, GDPR) and enterprise IT concepts (e.g., identity management, network security, cloud architecture).
• Enthusiasm for navigating how cybersecurity, IT risk, IT compliance, and IT governance functions operate within a fast-paced digital banking environment.
• Professional certifications

Skills:

• Strong analytical and problem-solving skills with a proven ability to translate complex IT and security concepts into structured risk assessments.
• Proficiency with data management and reporting tools (Microsoft Excel/Google Sheets); hands-on experience with GRC tools (e.g., OneTrust) and issue tracking software (JIRA, Confluence) is highly preferred.
• Industry certifications such as CRISC, CISA, or ISO 27001 Lead Auditor/Implementer are highly advantageous.
• Clear and professional communication skills; able to document findings accurately and influence cross-functional team members to complete compliance tasks.
• Excellent organizational skills with the ability to manage multiple assessments and deliverables simultaneously without losing attention to detail.
• Comfortable working autonomously and collaboratively in a hybrid team environment.
• Fluency in English is required; German is a plus.

• Adaptability and opennes to learning, with a keen interest in staying up-to-date with the latest trends and developments in IT and information security.
• Passion for risk management, internal controls, and complex problem-solving.
• Detail-oriented and meticulous in ensuring accuracy and thoroughness in all tasks.
• Proactivity and self-motivation, with the ability to work independently and as part of a team. Willingness to continuously learn and act upon direct feedback.
• Strong topic ownership and a bias for action, helping oneself and the team to be successful.
• Critical thinking and a drive to improve the status quo, withattention to detail and strong conceptual thinking.
• Flexibility in a fast-changing and agile environment.
• High ethical standards and integrity, with a strong commitment to confidentiality and data protection.

What’s in it for you:

• Accelerate your career growth by joining one of Europe's most talked about disruptors.
• Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation.
• As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members.
• Vacation days vary depending on your location of work. Additional day of annual leave for each year of service.
• A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, life experiences and family statuses.
• A relocation package with visa support for those who need it.

Equal opportunities for all

At N26, we believe our strength lies in our people and the varied perspectives they bring. We strive to build diverse teams that drive innovation and business success. We actively seek talent from all backgrounds and welcome applications from all genders, cultures, sexual orientations, abilities, neurodiversities, and ages.

We are committed to providing an excellent and accessible candidate experience. If you require any accommodations to make this process work for you, please let us know. We're here to support you!

Discover more about Diversity & Inclusion at N26: https://n26.com/en-eu/diversity-and-inclusion