ICT GRC – ICT Governance Senior Manager

N26; Berlin (NH); On-site; USD 104,000 - 173,000; Full time

Benefits offered by this job

Relocation package with visa support

Premium N26 bank account access for员工

Work from home budget and personal dev

Job summary

N26 is seeking an ICT Senior Governance Manager to own and evolve the ICT governance framework within the CISO Office. You will lead the ICT and Firewall Governance teams, aligning regulatory expectations with business priorities while enabling responsible innovation.

You will act as a trusted advisor to senior stakeholders, drive regulatory alignment across MaRisk, DORA, AI Act, CRA, PSD3, and automate governance using AI-enabled monitoring and testing tools.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field.
• 8+ years of ICT/information security governance, risk management, or compliance.
• Strong knowledge of MaRisk, DORA, AI Act, CRA, PSD3 and international standards (ISO 27001/27002, NIST, COBIT).
• Experience leading, mentoring, or developing others.

Responsibilities

• Own, define, and evolve ICT governance documentation (policies, standards, procedures, work instructions, process flows).
• Develop Target Measure Catalogue (TMC) and map to regulations and standards.
• Drive TMC integration into 1st-line procedures and manage change as regulations evolve.
• Ensure controls are mapped to regulations and standards across MaRisk/DORA/AI Act/PSD3.
• Lead, grow, and manage ICT Governance and Firewall Governance teams.

Skills

Strategic thinking

Leadership

Stakeholder management

English & German proficiency

Project management

Analytical thinking

Regulatory knowledge

AI-enabled governance

Education

Bachelor's degree in IT / CS / Information Security

Job description

About the opportunity

As ICT Senior Governance Manager, you will own the strategic direction, execution, and continuous evolution of ICT Governance within the CISO Office (2nd Line of Defense), including oversight of Firewall Governance as part of your team s remit. You ll operate with full autonomy and accountability, both for the frameworks the function owns and for the people who run them day to day.

You will act as a trusted advisor to senior stakeholders, aligning regulatory expectations with business priorities while enabling the organisation to innovate responsibly. As the primary escalation point for audit findings and regulatory reviews, you ll represent ICT Governance in high-stakes conversations and make sure your team has the context and support to do the same in their own areas.

Just as important as the governance mandate is the team behind it: you will lead and develop ICT Governance and Firewall Governance professionals, building a team others want to be part of. As regulatory and technological demands keep evolving, you ll help modernise how governance gets done - exploring AI-enabled approaches to compliance monitoring and control assurance. If you want the scope of a strategic governance mandate and the accountability of leading a team, this is your opportunity.

In this role, you will:

Own, define, and continuously evolve the ICT/Information Security governance documentation framework within the CISO Office - policies, standards, procedures, work instructions, and process flows - and establish clear accountability models across 1st and 2nd line functions.
Own and strategically develop the Target Measure Catalogue (TMC), ensuring its completeness, regulatory alignment, and accurate mapping to relevant regulations and standards.
Drive enterprise-wide integration of TMC requirements into 1st-line procedures, and oversee change management as the TMC and regulatory landscape evolve.
Ensure governance controls remain comprehensively and traceably mapped to relevant regulations (MaRisk, DORA, AI Act, CRA, PSD3) and standards (ISO 27001/27002, NIST), proactively translating regulatory developments into governance enhancements.
Drive DORA-related activities to strengthen operational resilience across the ICT landscape.
Act as subject matter expert for ICT Governance during regulatory reviews, supervisory interactions, and audits.
Own end-to-end delivery of IT audit-related requests for the CISO Office, acting as primary escalation and decision authority for findings, and ensuring timely, sustainable remediation with clear reporting to senior stakeholders.
Provide governance oversight of firewall and network security controls delivered by the team - rule reviews, segmentation assurance, control testing - ensuring they meet internal policy and regulatory expectations.
Lead, manage, and grow the ICT Governance team, spanning ICT Governance and Firewall Governance - own hiring, onboarding, task delegation, and day-to-day performance.
Own team planning and resourcing - staffing needs, workload distribution, and development priorities - in partnership with the department lead.
Coach team members toward independent judgement rather than directing every decision, and contribute to hiring decisions across the wider governance function.
Act as trusted advisor to senior stakeholders, aligning regulatory expectations with business priorities, and represent the function s work to bodies such as the Non-Financial Risk Committee.
Translate regulatory and security requirements into terms 1st-line technical teams can act on, and run enablement sessions to build shared governance literacy.
Define and implement AI-enabled approaches to automate compliance monitoring and control testing.

What you need to be successful:

Background:
Bachelor s degree in Information Technology, Computer Science, Information Security, or a related field.
Professional certifications such as CISA, CISM, CRISC, or equivalent strongly preferred.
8+ years of experience in ICT/information security governance, risk management, or compliance, ideally within banking or financial services - including experience leading, mentoring, or developing others.
Strong knowledge of regulatory requirements (MaRisk, DORA, AI Act, CRA, PSD3) and international standards (ISO 27001/27002, NIST, COBIT).
Working understanding of network and perimeter security governance (firewall management, segmentation, second-line assurance) sufficient to lead and quality-assure a specialised team; hands-on firewall certifications are a plus, not required.
Demonstrated experience leveraging automation or AI tools to strengthen governance and compliance frameworks.

Skills:

Strong strategic thinking, translating regulatory complexity into practical governance frameworks in a fast paced environment.
Proven leadership and stakeholder management across 1st and 2nd line functions.
Team Leadership and Talent Development: Experience in leading a team, delegating effectively, managing team productivity, developing team members toward independent judgement and fostering a robust feedback culture.
Executive Communication and Stakeholder Alignment: Ability to build and maintain strong relationships with Leadership, Regulators, and other senior members of the organization by communicating context clearly, proactively surfacing key risks early and the ability to have difficult conversations constructively.
Excellent analytical and problem-solving capabilities in complex regulatory environments.
Advanced project and program management, able to run parallel initiatives independently.
Fluency in English and German (spoken and written) required.

Traits:

Strong sense of ownership and accountability - operates independently without supervision.
Strategic mindset balanced with attention to detail.
Comfortable challenging the status quo and driving organisational change.
Genuinely invested in developing people, not just delivering projects.
High ethical standards and integrity, with a strong commitment to confidentiality and data protection.
Resilient and adaptable in a fast-changing, regulated environment.

What’s in it for you:

Accelerate your career growth by joining one of Europe’s most talked about disruptors.
Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness and wellness memberships, language apps and public transportation.
As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members.
Additional day of annual leave for each year of service.
A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, experiences, and backgrounds.
A relocation package with visa support for those who need it.

Who we are

N26 has reimagined banking for today’s digital world. Technology and design empower a everything we do and it’s how we are building the global banking platform the world loves to use.

We ve eliminated physical branches, paperwork, and hidden fees for an elegant digital experience and supreme savings. Giving people the power to live and bank their way is what gets us out of bed in the morning and inspires the work that we do.

We are headquartered in Berlin with offices in multiple cities across Europe, including Vienna and Barcelona, and a 1,500-strong team of more than 80 nationalities.

Do you see yourself thriving in this role? We’d love to see your application even if you don’t meet 100% of the criteria. You may just be the right fit for this or other roles!

Equal opportunities for all

At N26, we believe our strength lies in our people and the varied perspectives they bring. We strive to build diverse teams that drive innovation and business success. We actively seek talent from all backgrounds and welcome applications from all genders, cultures, sexual orientations, abilities, neurodiversities, and ages.

We are committed to providing an excellent and accessible candidate experience. If you require any accommodations to make this process work for you, please let us know. We’re here to support you!

Discover more about Diversity and Inclusion at N26: a https://n26.com/en-eu/diversity-and-inclusion