ICT GRC – ICT Governance Senior Manager

As ICT Senior Governance Manager, you will own the strategic direction, execution, and continuous evolution of ICT Governance within the CISO Office (2nd Line of Defense), including oversight of Firewall Governance as part of your team's remit. You'll operate with full autonomy and accountability, both for the frameworks the function owns and for the people who run them day to day.

What you'll do

• Own, define, and continuously evolve the ICT/Information Security governance documentation framework within the CISO Office - policies, standards, procedures, work instructions, and process flows - and establish clear accountability models across 1st and 2nd line functions.
• Own and strategically develop the Target Measure Catalogue (TMC), ensuring its completeness, regulatory alignment, and accurate mapping to relevant regulations and standards.
• Drive enterprise-wide integration of TMC requirements into 1st-line procedures, and oversee change management as the TMC and regulatory landscape evolve.
• Ensure governance controls remain comprehensively and traceably mapped to relevant regulations (MaRisk, DORA, AI Act, CRA, PSD3) and standards (ISO 27001/27002, NIST).
• Act as subject matter expert for ICT Governance during regulatory reviews, supervisory interactions, and audits.
• Own end-to-end delivery of IT audit-related requests for the CISO Office, acting as primary escalation and decision authority for findings.
• Lead, manage, and grow the ICT Governance team, spanning ICT Governance and Firewall Governance.
• Define and implement AI-enabled approaches to automate compliance monitoring and control testing.

What you'll need

• Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field.
• Professional certifications such as CISA, CISM, CRISC, or equivalent strongly preferred.
• 8+ years of experience in ICT/information security governance, risk management, or compliance, ideally within banking or financial services.
• Strong knowledge of regulatory requirements (MaRisk, DORA, AI Act, CRA, PSD3) and international standards (ISO 27001/27002, NIST, COBIT).
• Fluency in English and German (spoken and written) required.
• Proven leadership and stakeholder management across 1st and 2nd line functions.
• Executive Communication & Stakeholder Alignment: Ability to build and maintain strong relationships with Leadership, Regulators, and other senior members of the organization.
• Strong sense of ownership and accountability - operates independently without supervision.

What they offer

• Competitive personal development budget, work from home budget, fitness & wellness memberships, language apps and public transportation discounts.
• Premium N26 bank account subscription for you and friends and family members.
• Additional day of annual leave for each year of service.
• High degree of autonomy and access to cutting edge technologies.
• Relocation package with visa support.