ICT Risk Assessment Manager

N26 Inc.; Berlin (NH); On-site; USD 100,000 - 145,000; Full time

Benefits offered by this job

Personal development budget

Work from home budget

Fitness & wellness memberships

Language apps

Public transportation

Job summary

N26 Inc. is seeking an ICT Risk Assessment Manager to join the Information Risk Management (IRM) Segment. You will lead ICT risk assessments, align controls with industry standards, and drive improvements in monitoring and reporting across the risks landscape.

Fluency in English is required; German knowledge is a plus. The role emphasizes collaboration with security engineers, product teams, and third-party vendors to elevate N26's risk posture in a dynamic fintech environment.

Qualifications

• Experience in ICT risk management and audit/compliance frameworks.
• Strong ability to communicate with stakeholders at different levels.
• Background in technology-driven business environments and banking sector familiarity a plus.

Responsibilities

• Manage full lifecycle of ICT risk assessments from identification to remediation monitoring.
• Coordinate tasks, prioritize workload, and ensure timely risk assessment delivery.
• Lead cross-functional collaboration and knowledge sharing within IRM.
• Provide oversight on ICT risks, controls, and technology evaluations.
• Develop KPIs and KRIs for ICT third-party risks and reporting.

Skills

ICT risk management

GRC tools

ISO 27001

PCI DSS

MaRisk

DORA

Cross-functional teams

AI tools

Education

Bachelor's degree

Tools

GRC software

ISO 27001 tooling

Job description

About the opportunity

We are looking for a ICT Risk Assessment Manager to join the Information Risk Management (IRM) Segment and work at the heart of ICT Compliance at N26. We’re setting the standard for innovation and excellence in FinTech compliance, embedding it into N26’s culture to ensure that every control, policy, and risk assessment strengthens our position as a leader in the industry. As part of our team, you’ll be at the forefront of building a compliance culture that’s innovative, scalable, and seamlessly integrated into our operations, making compliance a key driver of N26’s competitive advantage.

In this role, you will:

• Manage the full lifecycle of ICT risk assessments, from initial risk identification to final remediation monitoring.
• Assist in task prioritization, workload coordination, and ensuring timely delivery of risk assessments.
• Foster a collaborative and open team environment, encouraging knowledge sharing and continuous improvement.
• Act as a point of contact for team-related topics and support escalation handling when needed.
• Support the implementation and execution of the key pillars of Risk Management & Reporting in the field of Information Security.
• Drive the transformation of the company’s ICT Risk Assessment processes to bring them to the highest standards in line with a dynamic environment in constant evolution.
• Execute ICT Risk Assessments and ICT Audits for third-party provided tools and services in an accurate and timely manner.
• Proactively coordinate activities with Third Party Vendors, Product Owners, Security Engineers and within the IRM Segment to perform the aforementioned assessments.
• Provide technical and quality oversight regarding ICT risks, controls and technologies, including ongoing risk assessments, risk decisions, control implementation, evaluation of segregation of duties, and process improvement opportunities.
• Contribute to perform Protection Requirement Analysis to determine the criticality of N26’s information assets and their needs for protection.
• Identify gaps in current frameworks and lead improvement efforts that streamline the team's efficiency.
• Act as a subject matter expert, distilling complex technical risks into clear, actionable essence for leadership.
• Participate in the coaching and training of new hires and junior colleagues, ensuring quality of deliverables.
• Develop KPIs and KRIs that support monitoring of ICT third party risks and reporting to 2nd line.

What you need to be successful:

• Strong understanding of Information & Communication Technologies (ICT) and the ICT Risk Management domain, as well as audit/compliance frameworks, methodologies and related processes.
• Ability to communicate clearly with peers, as well as stakeholders of all levels from the partner companies.
• Previous experience working in a dynamic environment of a technology-driven business (as e.g. a scaled startup).
• Hands-on experience with cross-functional teams, business operations analysts, security engineers, software engineers, product managers, data analysts, IT audit functions, among other relevant stakeholders, in assessing processes, risks and controls.
• Knowledge and hands-on experience on SOC reports, ISO 27001 certification and other standards or frameworks as a plus (as e.g., PCI DSS).
• Previous experience in the banking sector is a plus, especially understanding of MaRisk and DORA requirements. Experience with Governance, Risk & Compliance (GRC) platforms.
• Strong Sense of Ownership: You are able to inherit a workflow, identify its weaknesses, and independently implement improvements and optimizations on your own initiative.
• Experience with AI tools to improve workflows and efficiency

Skills:

• Proficiency with Governance, Risk and Compliance (GRC) tools
• Detail-oriented approach to analyzing technical evidence and documenting findings.
• Fluency in English is strictly required. German language knowledge is a plus.
• A hands-on mentality, eager to suggest and implement process improvements.

What’s in it for you:

• Accelerate your career growth by joining one of Europe’s most talked about disruptors.
• Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation.
• As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members.
• Vacation days vary depending on your location of work. Additional day of annual leave for each year of service.
• A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, life experiences and family statuses.
• A relocation package with visa support for those who need it.