Data Privacy & Governance Lead

N26 Inc.; Berlin (NH); On-site; USD 101,000 - 135,000; Full time

Benefits offered by this job

Personal development budget

Work from home budget

Fitness & wellness discounts

Premium N26 account subscription

Relocation with visa support

Job summary

N26 Inc. is seeking an experienced Data Protection and Governance Manager to join the CISO Office. In this pivotal role, you will help ensure N26 meets its data protection obligations and embed privacy requirements in day-to-day operations.

You will work across the business to operationalise data ownership, manage privacy risk across GDPR and emerging regs (EU AI Act), support the DPO, design privacy metrics, and drive audits and vendor risk management.

Qualifications

• 3+ years in data protection and data governance.
• Experience implementing privacy risk frameworks and risk registers.
• Knowledge of encryption, access controls, logging, and incident response.
• Familiar with GRC tooling and AI risk reporting.
• Certifications preferred: IAPP CIPM/CIPP/E or security/risk certs.

Responsibilities

• Operationalise data ownership, stewardship and lifecycle controls across the business.
• Maintain the 2LoD risk framework and privacy risk registers for GDPR, DORA, MaRisk, and EU AI Act.
• Triage the DPO mailbox and manage complex queries and processes.
• Design privacy metrics, health checks, and executive reporting for governance forums.
• Close audit findings and manage third-party/vendor risks (DPAs, PIAs/TIAs).

Skills

Data privacy

Privacy risk mgmt

Data governance

GRC tooling

ServiceNow

Audit actions

English comms

Education

Tech/Law/Risk degree

Tools

ServiceNow

Job description

N26 Inc. is seeking an experienced Data Protection and Governance Manager to join the CISO Office. In this pivotal role, you will help ensure N26 meets its data protection obligations and embed privacy requirements in day-to-day operations.

You will work across the business to operationalise data ownership, manage privacy risk across GDPR and emerging regs (EU AI Act), support the DPO, design privacy metrics, and drive audits and vendor risk management.