ICT GRC – ICT Compliance Senior Manager

As an ICT Compliance Senior Manager, you will spearhead the strategy and continuous evolution of N26's IT compliance framework within the 2nd Line of Defense. Serving as a central authority in the CISO Office, you will ensure our digital infrastructure seamlessly aligns with stringent EU and German regulations while linking your team's vision directly to company OKRs.

What you'll do

• Drive the function-wide IT compliance objective and strategy within the 2nd Line of Defense, establishing an aligned vision across multiple teams and reporting to senior leadership.
• Define, maintain, and continuously elevate the target measure catalogue and ICT compliance roadmap, aligning internal security standards with cutting-edge industry practices and regulatory expectations.
• Lead and direct comprehensive, independent second-line compliance assessments of N26's Information Security Management System (ISMS) and ICT control ecosystem.
• Ensure full, end-to-end adherence to key EU and German regulatory frameworks (e.g., DORA, MaRisk, BAIT, CSA, PSD3) and international standards (ISO 27001/27002, NIST).
• Own regulatory reporting for ICT compliance, delivering executive-level presentations on compliance posture, risk exposure, and strategic mitigation plans to top management and regulatory authorities.
• Champion AI-enabled compliance monitoring, automation initiatives, and second-line control testing to maximize efficiency, accuracy, and operational impact.
• Independently audit and challenge 1st line ICT processes and information domain controls—specifically regarding DORA compliance—evaluating control design and operating effectiveness.
• Assist with annual planning, staffing, and expense prioritization while actively participating in hiring, mentoring team members, and driving a strong culture of feedback.

What you'll need

• Bachelor's or Master's degree in Computer Science, Information Technology, Information Security, or a related field.
• 8+ years of progressive experience in IT risk management, ICT compliance, or information security, with significant leadership exposure in banking, fintech, or regulated financial services.
• Deep mastery of European and German financial regulatory frameworks (DORA, MaRisk, BAIT, PSD3/PSD2, CSA) and security frameworks (ISO 27000 series, NIST CSF).
• Strategic and conceptual leadership ability to build aligned vision across teams and drive function objectives.
• Experience leading a team, delegating effectively, mentoring colleagues, and fostering a robust feedback culture.
• Executive communication and stakeholder alignment skills with ability to build relationships with leadership and regulators.
• Proficiency with enterprise GRC tools, risk management software, and modern collaboration tools (JIRA, Confluence, FigJam).
• Professional working proficiency in English and German is required.

Nice to have

• Professional certifications (e.g., CISM, CRISC, CISA, ISO 27001 Lead Auditor/Implementer, CISSP).
• Comprehensive technical grasp of cloud security, modern software architecture, application security, microservices, and IT infrastructure resilient controls.

What they offer

• Competitive personal development budget and work from home budget.
• Discounts to fitness & wellness memberships, language apps, and public transportation.
• Premium N26 bank account subscription for you and friends/family members.
• Additional day of annual leave for each year of service.
• High degree of autonomy and access to cutting edge technologies.
• Relocation package with visa support for those who need it.