ICT Risk Assessment Manager

About the role

Join the Information Risk Management (IRM) Segment to lead ICT risk assessments at the heart of ICT Compliance at N26. You'll be at the forefront of building a compliance culture that's innovative, scalable, and seamlessly integrated into operations, making compliance a key driver of N26's competitive advantage.

What you'll do

• Lead the lifecycle of ICT risk assessments, from initial risk identification and execution to final remediation monitoring.
• Execute and coordinate ICT Risk Assessments and ICT Audits for third-party tools and services, collaborating closely with Third-Party service providers, Product Owners, Security Engineers, and Data Privacy.
• Provide technical and quality oversight regarding ICT risks, controls, and technologies—including ongoing risk decisions, control implementation, and propose improvement opportunities.
• Act as a subject matter expert, translating complex technical risks into clear, actionable insights, for business and technical teams.
• Conduct security impact assessments on ICT assets and business processes.
• Develop KPIs and KRIs that support the monitoring of ICT third-party risks and reporting to the 2nd line of defense.
• Coach and mentor new hires and junior colleagues, through knowledge-sharing, hands-on guidance, and structured feedback.
• Build strong stakeholder relationships through proactive engagement, clear communication, and alignment with organizational priorities.

What you'll need

• 4-5 years experience in information security ICT Risk Management, ICT audits, or related fields.
• Previous experience in the banking/FinTech sector is highly preferred, specifically with an understanding of MaRisk and DORA requirements.
• Proven experience working in a fast-paced, technology-driven business, collaborating with security engineers, software developers, product managers, and IT auditors.
• A strong sense of ownership with the ability to inherit a workflow, identify weaknesses, and independently implement optimizations.
• Hands-on experience or advanced knowledge of leveraging AI tools to optimize workflows and overall team productivity.
• Ability to communicate complex technical concepts clearly to both technical peers and non-technical stakeholders of all levels.
• Fluency in English is strictly required. German language knowledge is a plus.

Nice to have

• Relevant certifications (CISA, CISM, CRISC).

What they offer

• Competitive personal development budget, work from home budget, and discounts to fitness & wellness memberships.
• Premium N26 bank account subscription and access for friends and family.
• Additional day of annual leave for each year of service.
• High degree of autonomy and access to cutting edge technologies.
• Relocation package with visa support.