Cloud & AI Security Controls Manager

N26; Berlin (NH); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Relocation package with visa support

Premium subscription for personal N26

Personal development budget

Work from home budget

Extra day of annual leave

Job summary

N26 is seeking an Information Security Controls Manager to strengthen Cloud Security posture and AI Governance within the Information Risk Management team. You will monitor controls, coordinate with CISO and DPO, and drive audits and evidence collection across cloud and AI systems.

The role requires 4–6 years of security compliance experience, fluency in English, and hands-on familiarity with ISO 27001, EU GDPR, and related standards.

Qualifications

• 4–6 years of experience in information security compliance, risk, or audit.
• Strong knowledge of Cloud Security controls (AWS/Google Cloud preferred) and AI governance risk frameworks.
• Experience with ISO 27001, ISO42001, NIST, BSI C5, and regulations like DORA, EU AI Act, EU GDPR.
• Fluency in English; German proficiency is a plus.
• Proficiency with Jira, Confluence, and Google Workspace apps.

Responsibilities

• Communicate with stakeholders at all levels.
• Execute and review IS Controls monitoring for cloud infrastructure and AI/ML deployments.
• Review evidence via monthly control review tickets (TOE).
• Perform QA reviews and clarify with stakeholders to ensure controls effectiveness.
• Highlight gaps/risks, raise non-conformities, and suggest improvements.

Skills

Cloud Security

AI governance

Stakeholder communication

Jira

Confluence

Google Workspace

Education

Bachelor’s or Master’s degree in information security or computer science

Tools

ServiceNow

OneTrust

Job description

N26 is seeking an Information Security Controls Manager to strengthen Cloud Security posture and AI Governance within the Information Risk Management team. You will monitor controls, coordinate with CISO and DPO, and drive audits and evidence collection across cloud and AI systems.

The role requires 4–6 years of security compliance experience, fluency in English, and hands-on familiarity with ISO 27001, EU GDPR, and related standards.