All positions
ICT GRC - IT Compliance Manager (fluent German required)
Department:Risk
Location:Berlin
ICT GRC - IT Compliance Manager (fluent German required)
About the opportunity
Are you ready to take the next step in your career? As anICT GRC - IT Compliance Manager, you will play a pivotal role in shaping compliance frameworks in an increasingly AI-driven regulatory landscape. In this role, you’ll ensure that our IT systems and information security practices are robust, compliant, and aligned with evolving regulations. You’ll be the bridge between compliance, security, and technology, helping the organisation meet regulatory obligations while embracing innovation. With AI and automation transforming compliance processes, you’ll have the opportunity to explore and implement AI-driven solutions to enhance compliance monitoring, risk assessments, and regulatory reporting. This is your chance to not just follow regulations, but to help redefine how they are met in a tech-forward environment.
In this role you will
- Be a part of the bank’s risk function (2nd Line of Defense), report to the Deputy CISO and collaborate closely with 1st Line of Defense teams.
- Maintain and update the target measure catalogue, ensuring all measures align with N26 information security standards.
- Assess and verify functional requirements derived from the target measure catalogue, ensuring they meet regulatory and internal standards.
- Lead the task of compliance analysis of the ISMS, ensuring adherence to EU regulations, German regulations, and relevant industry standards. They will continuously review the current and upcoming IT regulations that impact N26 and map them to our internal target measures and IT Controls.
- Bring a structured approach to the ways of working within the ICT GRC team and in order to support the CISO role within the company.
- Enable alignment between the team and leadership to prioritize global action items in relation to information security and team-based initiatives and gaps that need
- Collaborate with cross-functional teams such as product, technology, and security to address compliance obligations, identify gaps, and develop action plans.
- Monitor and track compliance actions, ensuring stakeholders meet deadlines and documenting progress for audit and reporting purposes.
- Manage compliance exception requests, evaluating associated risks, and ensuring timely follow-up prior to expiry.
- Regularly report compliance progress, highlighting gaps, mitigation efforts, and adherence to regulatory requirements.
Explore AI-driven approaches
to streamline compliance monitoring, automate assessments, and improve regulatory alignment.- Facilitate discussions with stakeholders ensuring compliance efforts are transparent, proactive, and continuously improving
- Enable alignment between various teams and stakeholders on various key Compliance topics and are able to manage and resolve conflicts effectively
- Perform Quality Assurance of IT Security Assessments and deliver the audit requirements for the ICT GRC team and the reporting for CISO role.
- Represent the CISO Office on key Compliance topics and be able to take independent decisions for the team
- Take end-to-end responsibility and ownership on the above listed tasks/topics as per agreement with the (D)CISO
- Execute the team’s vision for the IT Compliance function and fulfil the operational requirements of the role as per the agreed roadmap
What you need to be successful
Background
- Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field would be preferable but not mandatory.
- Professional certifications such as CISA / CISM / CRISC, or equivalent are highly desirable.
- Minimum of 6 years of experience in IT risk management, information security, and compliance, preferably within the banking or financial services industry.
- In-depth knowledge of relevant regulatory requirements, such as MaRisk, BAIT, DORA and industry standards such as ISO 27001/27002, NIST, etc.
- Strong understanding of IT infrastructure, network security, application security, and cloud security.
Skills
- Excellent analytical and problem-solving skills, with the ability to identify and assess complex IT and information security risks.
- Ability to proactively recommend improvements to the area based on your expertise, as well as drive and operationalize the necessary changes required
- Strong project management skills with the ability to manage multiple tasks and projects simultaneously.
- Ability to manage the IT Compliance processes from end to end
- Proficient in using compliance and risk assessment tools, with a curiosity for how AI can improve compliance processes
- Proficient in using JIRA, Confluence and Figjam is a plus.
- Effective communication and interpersonal skills, with the ability to explain technical concepts to non-technical stakeholders.
- Strong report-writing and presentation skills.
Fluency in English and German is required
Traits
- Adaptable and open to learning, with a keen interest in staying up-to-date with the latest trends and developments in IT and information security.
- Understand business goals and prioritize accordingly
- Passion for risk management, internal controls, and complex problem-solving.
- Detail-oriented and meticulous in ensuring accuracy and thoroughness in all tasks.
- Proactive and self-motivated, with the ability to work independently and as part of a team.
- Collaborative, able to work well with teams and stakeholders.
- Creates alignment amongst team
- Lead a significant piece of work / project
- Mentor other team members
- Strong topic ownership and a bias for action.
- Takes initiative to fix issues before being assigned to them
- Be able to have direct conversations and give balanced, constructive feedback
- Critical thinking and a drive to improve the status quo.
- Both attention to detail and strong conceptual thinking.
- Flexibility in a fast-changing and agile environment.
- Actively help oneself and the team to be successful.
- Willingness to continuously learn and act upon direct feedback.
- High ethical standards and integrity, with a strong commitment to confidentiality and data protection.
What’s in it for you:
- Accelerate your career growth by joining one of Europe’s most talked about disruptors 🚀.
- Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation.
- As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members.
- Additional day of annual leave for each year of service.
- A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, life experiences and family statuses.
- A relocation package with visa support for those who need it.