ICT Risk Assessment Manager

• Manage the full lifecycle of ICT risk assessments, from initial risk identification to final remediation monitoring.
• Assist in task prioritization, workload coordination, and ensuring timely delivery of risk assessments.
• Foster a collaborative and open team environment, encouraging knowledge sharing and continuous improvement.
• Act as a point of contact for team-related topics and support escalation handling when needed.
• Support the implementation and execution of the key pillars of Risk Management & Reporting in the field of Information Security.
• Drive the transformation of the company’s ICT Risk Assessment processes to bring them to the highest standards in line with a dynamic environment in constant evolution.
• Execute ICT Risk Assessments and ICT Audits for third-party provided tools and services in an accurate and timely manner.
• Proactively coordinate activities with Third Party Vendors, Product Owners, Security Engineers and within the IRM Segment to perform the aforementioned assessments.
• Provide technical and quality oversight regarding ICT risks, controls and technologies, including ongoing risk assessments, risk decisions, control implementation, evaluation of segregation of duties, and process improvement opportunities.
• Contribute to perform Protection Requirement Analysis to determine the criticality of N26’s information assets and their needs for protection.
• Identify gaps in current frameworks and lead improvement efforts that streamline the team's efficiency.
• Act as a subject matter expert, distilling complex technical risks into clear, actionable essence for leadership.
• Participate in the coaching and training of new hires and junior colleagues, ensuring quality of deliverables.
• Develop KPIs and KRIs that support monitoring of ICT third party risks and reporting to 2nd line.
  
  

• Strong understanding of Information & Communication Technologies (ICT) and the ICT Risk Management domain, as well as audit/compliance frameworks, methodologies and related processes.
• Ability to communicate clearly with peers, as well as stakeholders of all levels from the partner companies.
• Previous experience working in a dynamic environment of a technology-driven business (as e.g. a scaled startup).
• Hands-on experience with cross-functional teams, business operations analysts, security engineers, software engineers, product managers, data analysts, IT audit functions, among other relevant stakeholders, in assessing processes, risks and controls.
• Knowledge and hands-on experience on SOC reports, ISO 27001 certification and other standards or frameworks as a plus (as e.g., PCI DSS).
• Previous experience in the banking sector is a plus, especially understanding of MaRisk and DORA requirements. Experience with Governance, Risk & Compliance (GRC) platforms.
• Strong Sense of Ownership: You are able to inherit a workflow, identify its weaknesses, and independently implement improvements and optimizations on your own initiative.
• Experience with AI tools to improve workflows and efficiency
  
  

• Proficiency with Governance, Risk and Compliance (GRC) tools
• Detail-oriented approach to analyzing technical evidence and documenting findings.
• Fluency in English is strictly required. German language knowledge is a plus.
• A hands-on mentality, eager to suggest and implement process improvements.
  
  

• Accelerate your career growth by joining one of Europe’s most talked about disruptors .
• Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation.
• As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members.
• Vacation days vary depending on your location of work. Additional day of annual leave for each year of service.
• A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, life experiences and family statuses.
• A relocation package with visa support for those who need it.