ICT GRC – Risk & Compliance Manager

As an ICT GRC - Risk & Compliance Manager, you will play a pivotal role in shaping how we manage IT risks in an increasingly AI-driven financial landscape. You'll be at the forefront of risk management and compliance, ensuring our IT systems remain secure, resilient, and aligned with evolving regulations.

What you'll do

• Function as a key member of the bank's risk function (Second Line of Defense), reporting directly to the Deputy CISO and maintaining close collaboration with First Line of Defense teams on matters of ICT risk management.
• Actively engage in the ICT Risk Management process, encompassing proactive risk assessment, analysis, treatment plan identification, mitigation, and ongoing monitoring.
• Drive the maturity of the ICT Risk Management framework in adherence to DORA act.
• Proactively conduct risk assessments to identify ICT risks within the bank's IT infrastructure and propose appropriate mitigation strategies.
• Collaborate with cross-functional teams to identify and implement risk treatment plans.
• Maintain the ICT risk register, ensuring accuracy and completeness of ICT risks.
• Leverage artificial intelligence tools and technologies to enhance risk management and compliance processes.
• Ensure clear, actionable communication aligned with the bank's risk management strategy.

What you'll need

• Bachelor's degree in Information Technology, Computer Science, Information Security, or related field.
• Minimum 6 years of experience in IT risk management, information security, and compliance, preferably within banking or financial services.
• In-depth knowledge of MaRisk, BAIT, DORA and standards such as ISO 27001/27002, NIST.
• Strong understanding of IT infrastructure, network security, application security, and cloud security.
• Excellent analytical and problem-solving skills with ability to assess complex IT and information security risks.
• Strong project management skills with ability to manage multiple tasks simultaneously.
• Fluency in English and German (spoken and written).

Nice to have

• Professional certifications such as CISA / CISM / CRISC.
• Proficiency in Enterprise GRC tools such as OneTrust / ServiceNow GRC.

What they offer

• Competitive personal development budget, work from home budget, and fitness & wellness memberships.
• Premium N26 bank account subscription and access to cutting-edge technologies.
• Additional day of annual leave for each year of service.
• High degree of autonomy and relocation package with visa support.