ICT GRC - Firewall Governance Senior Associate

About the role

This is a Senior Associate position within a newly formed ICT GRC Firewall Governance team at N26. You'll provide independent oversight and governance of the bank's global cloud-based firewall environment, ensuring compliance with regulatory requirements and internal policies while performing second-line assurance activities.

What you'll do

• Support implementation and maintenance of governance controls for firewall management
• Perform second line reviews of firewall configurations, rule changes, and access requests
• Participate in control testing activities and document results within the ICT control framework
• Track and monitor firewall-related risks and mitigations in the ICT Risk Register
• Prepare evidence for audits and regulatory reviews related to network and perimeter security
• Conduct assurance reviews of firewall rule management, change processes, and monitoring practices
• Coordinate with first line teams to review architecture updates and security incidents
• Monitor compliance with DORA, BAIT, ISO 27001, and NIST standards for perimeter security
• Maintain dashboards and reports on firewall governance and control testing outcomes

What you'll need

• 2-4 years of experience in network security, firewall administration, or information security
• Working knowledge of enterprise firewall platforms (Palo Alto, Check Point, Fortinet)
• Understanding of network security concepts including routing, NAT, VPN, and IDS/IPS
• Familiarity with ICT control frameworks or audit and assurance methodologies
• Analytical mindset with attention to detail and accuracy in documentation
• Strong communication skills and collaboration abilities with technical and risk teams
• Fluency in English and German proficiency required

Nice to have

• Knowledge of EU or German financial sector regulations (DORA, BAIT, MaRisk)
• Understanding of ISO 27001, NIST CSF, or COBIT frameworks
• Experience with Firewall Governance tools (Tufin, AlgoSec)
• Firewall certifications (SANS SEC503/SEC530/SEC401, Checkpoint CCSA/CCSE/CCSM, AWS ANS-01/SCS-CO2, Palo Alto)

What they offer

• Competitive personal development budget and work from home budget
• Discounts on fitness, wellness memberships, language apps, and public transportation
• Premium N26 subscription plus subscriptions for friends and family
• Additional annual leave day for each year of service
• High degree of autonomy and access to cutting-edge technologies
• Relocation package with visa support when needed