Information Security Controls Manager - Cloud & AI Governance

About the role

Join the Information Risk Management Segment within the Information Security Controls team to ensure Information Security Controls Framework processes operate without disruption, with specialized focus on strengthening Cloud Security posture and AI Governance frameworks.

What you'll do

• Execution and review of the Information Security Controls Framework monitoring process, ensuring comprehensive coverage of cloud infrastructure and AI/ML deployments.
• Communicate, collate and review evidence received via monthly control review request tickets.
• Perform QA reviews, query and seek clarification from stakeholders to achieve control effectiveness objectives.
• Highlight gaps and risks observed during reviews, raise non-conformities particularly concerning cloud misconfigurations and AI model risks, and suggest improvements.
• Liaise with the CISO office and DPO office to provide monthly updates on control status and compliance regarding cloud security and AI systems.
• Improve awareness of controls, security practices, and responsible AI utilization among stakeholders.
• Contribute to developing KRIs tailored to traditional IT, Cloud environments, and AI use cases.
• Review and update control pages from a technical perspective and maintain the control calendar.

What you'll need

• Bachelor's or Master's degree relevant to information security or computer science.
• Approximately 4-6 years of experience in information security compliance, risk, or audit role.
• Demonstrated experience or strong knowledge of Cloud Security controls (AWS/Google Cloud preferred) and AI/ML governance risk frameworks.
• Previous hands-on experience or knowledge on security standards such as ISO 27001, ISO 42001, NIST, BSI C5, DORA, EU AI Act, EU CRA and EU GDPR.
• Ability to communicate clearly with peers and stakeholders of all levels.
• Proficiency in Jira, Confluence and Google Workspace apps with good understanding of Google Sheets features and formulas.
• Fluency in English strictly required. German proficiency is a plus.

What they offer

• Competitive personal development budget, work from home budget, fitness and wellness memberships, language apps and public transportation discounts.
• Premium N26 bank account subscription and subscriptions for friends and family members.
• Additional day of annual leave for each year of service.
• High degree of autonomy and access to cutting edge technologies.
• Relocation package with visa support for those who need it.