ICT GRC – Risk & Compliance Manager Berlin

N26; Berlin; Hybrid; EUR 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

Personal development budget

Work from home budget

Fitness & wellness discounts

Language apps

Public transportation benefits

Relocation package with visa support

Zusammenfassung

N26 is seeking an ICT GRC - Risk & Compliance Manager to shape how we manage IT risks in an AI-driven financial landscape. You will lead ICT risk management, regulatory alignment, and implement AI-driven controls across tech, security and compliance teams.

You’ll work directly with the Deputy CISO and cross-functional stakeholders to mature risk frameworks, monitor risk, and report on mitigation and compliance status, while driving continuous improvement.

Qualifikationen

• Bachelor's degree in Information Technology, Computer Science, Information Security, or related field.
• Professional certifications such as CISA / CISM / CRISC, or equivalent are highly desirable.
• Minimum of 6 years of experience in IT risk management, information security, and compliance, preferably in banking/financial services.
• Familiarity with MaRisk, BAIT, DORA, ISO 27001/27002, NIST, and cloud/IT infrastructure security.

Aufgaben

• Act as a key member of the risk function (Second Line of Defense) reporting to the Deputy CISO.
• Drive ICT Risk Management processes including risk assessments, mitigation, and monitoring.
• Evolve the ICT Risk Management framework in line with DORA requirements.
• Identify ICT risks in IT infrastructure and propose suitable mitigations.
• Collaborate with product, technology, security, and other First Line teams on risk treatment.
• Maintain and update the ICT risk register with accurate data.
• Prepare detailed reports and presentations on risk status and compliance.
• Leverage AI tools to enhance risk management and compliance workflows.
• Communicate clearly with stakeholders and drive continuous improvement.

Kenntnisse

IT risk management

Information security

Regulatory compliance

AI-enabled risk tools

GRC tooling

Communication skills

English & German fluency

Ausbildung

Bachelor's degree in IT/CS/InfoSec

Tools

OneTrust

ServiceNow GRC

Jobbeschreibung

About the opportunity

Are you ready to take the next step in your career? As an ICT GRC - Risk & Compliance Manager, you will play a pivotal role in shaping how we manage IT risks in an increasingly AI-driven financial landscape.

In this role, you’ll be at the forefront of risk management and compliance, ensuring our IT systems remain secure, resilient, and aligned with evolving regulations. You’ll work closely with tech, security, and compliance teams to strengthen risk frameworks, enhance resilience, and drive smarter decision-making.

As AI and automation become essential in risk management, you’ll help explore and implement automation and AI-driven solutions to improve risk assessments, identify emerging threats, and streamline compliance processes. This is an opportunity to not just keep up with change, but to help shape it.

If you're looking for a role where AI, automation, and ICT Risk and compliance intersect, and where your expertise can have a real impact, this is it.

In this role you will

• Function as a key member of the bank's risk function (Second Line of Defense), reporting directly to the Deputy CISO and maintaining close collaboration with First Line of Defense teams on matters of ICT risk management.
• Actively engage in the ICT Risk Management process, encompassing proactive risk assessment, analysis, treatment plan identification, mitigation, and ongoing monitoring.
• Drive the maturity of the ICT Risk Management framework in adherence to DORA act.
• Proactively conduct risk assessments to identify ICT risks within the bank's IT infrastructure and propose appropriate mitigation strategies.
• Collaborate with cross-functional teams, including product, technology, security, and other First Line of Defense teams, to identify and implement risk treatment plans.
• Maintain the ICT risk register, ensuring the accuracy and completeness of ICT risks.
• Proactively report progress and updates to the team, providing detailed reports and presentations on the status of identified risks, mitigation efforts, and compliance.
• Leverage artificial intelligence tools and technologies to enhance risk management and compliance processes.
• Ensure that all communication is clear, actionable, and aligned with the bank's overarching risk management strategy. Facilitate regular meetings with key stakeholders to discuss risk status, challenges, and next steps, fostering a culture of continuous improvement and proactive risk management.

What you need to be successful

Background

• Bachelor`s degree in Information Technology, Computer Science, Information Security, or a related field.
• Professional certifications such as CISA / CISM / CRISC, or equivalent are highly desirable.
• Minimum of 6 years of experience in IT risk management, information security, and compliance, preferably within the banking or financial services industry.
• In-depth knowledge of relevant regulatory requirements, such as MaRisk, BAIT, DORA and industry standards such as ISO 27001/27002, NIST, etc.
• Strong understanding of IT infrastructure, network security, application security, and cloud security.
• Should be able to leverage AI tools and techniques to enhance risk assessment, compliance monitoring, and the identification of emerging threats.

Skills

• Excellent analytical and problem-solving skills, with the ability to identify and assess complex IT and information security risks.
• Possesses expertise in assessing, writing and managing IT risks, threats and the ability to connect it with the appropriate controls.
• Ability to proactively recommend improvements to the area based on your expertise, as well as drive and operationalize the necessary changes required
• Strong project management skills with the ability to manage multiple tasks and projects simultaneously.
• Ability to manage the ICT Risk Management process from end to end
• Proficiency in using Enterprise GRC tools such OneTrust / ServiceNow GRC and ability to use AI-driven technologies for compliance and risk management is a plus.
• Effective communication and interpersonal skills, with the ability to explain technical concepts to non-technical stakeholders.
• Strong report-writing and presentation skills.
• Fluency in English and German are required (spoken and written).

Traits

• Adaptable and open to learning, with a keen interest in staying up-to-date with the latest trends and developments in IT and information security.
• Detail-oriented and meticulous in ensuring accuracy and thoroughness in all tasks.
• Proactive and self-motivated, with the ability to work independently and as part of a team.
• Collaborative, able to work well with teams and stakeholders.
• Strong topic ownership and a bias for action.
• Critical thinking and a drive to improve the status quo.
• Both attention to detail and strong conceptual thinking.
• Flexibility in a fast-changing and agile environment.
• Actively help oneself and the team to be successful.
• Willingness to continuously learn and act upon direct feedback.
• High ethical standards and integrity, with a strong commitment to confidentiality and data protection.

What’s in it for you:

• Accelerate your career growth by joining one of Europe’s most talked about disruptors.
• Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation.
• As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members.
• Additional day of annual leave for each year of service.
• A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, life experiences and family statuses.
• A relocation package with visa support for those who need it.

Who we are

N26 has reimagined banking for today’s digital world. Technology and design empower everything we do and it’s how we are building the global banking platform the world loves to use.

We've eliminated physical branches, paperwork, and hidden fees for an elegant digital experience and supreme savings. Giving people the power to live and bank their way is what gets us out of bed in the morning and inspires the work that we do.

We are headquartered in Berlin with offices in multiple cities across Europe, including Vienna and Barcelona, and a 1,500-strong team of more than 80 nationalities.

Equal Opportunities:

We recognize that our strength lies in our people and the varied perspectives they bring to our workforce. We strive to build talented and diverse teams to drive our business success and empower our people to reach their full potential.

We genuinely welcome and encourage applications from people of all backgrounds, cultures, genders, sexual orientations, abilities, neurodiversities, and ages. We're committed to creating an inclusive workspace where everyone feels valued and respected, free from harassment and discrimination. If there's anything you need to make the application process work for you, please let us know by reaching out to [e-mail].

Visit our website to learn more about Diversity, Equity, & Inclusion at N26.