All positions
ICT GRC - ICT Compliance Manager
Department:Risk
Location:Berlin
About the opportunity
We are seeking an ICT GRC - ICT Compliance Manager to join our team. In this role you will be fully accountable for the design, implementation, and continuous improvement of our IT compliance framework. You will lead the compliance topic end-to-end, ensuring our IT systems and information security practices are robust, scalable, and aligned with evolving European and German regulatory requirements.
In this role, you will not only ensure adherence to regulations, you will shape how compliance is embedded into technology, product development, and security practices. You will act as the central authority for IT compliance within the 2nd Line of Defense, driving alignment across stakeholders and proactively steering regulatory readiness in a fast-changing environment.
With AI and automation transforming compliance processes, you will evaluate, design, and implement AI-driven solutions to enhance compliance monitoring, risk assessments, second-line control testing, and regulatory reporting. This is your opportunity to redefine compliance operations in a technology-forward organisation.
In this role, you will:
- Own the IT compliance framework within the 2nd Line of Defense, reporting to the Deputy CISO.
- Define, maintain, and continuously enhance the target measure catalogue in alignment with internal security standards and regulatory requirements.
- Lead independent second-line compliance assessments of the ISMS and ICT control environment.
- Ensure full adherence to EU and German regulations (e.g., MaRisk,CSA,PSD3, DORA) and relevant industry standards (ISO 27001/27002, NIST, etc.).
- Drive regulatory gap analyses and define strategic remediation roadmaps.
- Own regulatory reporting related to ICT compliance and present progress, risks, and mitigation plans to senior stakeholders.
- Act as the primary contact for internal and external audits related to IT compliance topics for the second line CISO Office.
- Design and implement AI-enabled compliance monitoring and automation initiatives.
- Facilitate executive-level discussions on compliance posture, emerging regulatory developments, and risk exposure.
- Continuously improve governance structures, compliance processes, and control effectiveness.
- You will independently audit and challenge 1st line ICT processes and information domain controls for alignment with DORA requirements, assessing control design and operating effectiveness, identifying regulatory gaps, and ensuring sustainable remediation in line with second Line oversight expectations within the bank.
- Drive DORA related Compliance activities in the second-line and collaborating with other teams in the organisation to facilitate adherence.
What you need to be successful:
Background:
- Bachelor’s or Master’s degree in Information Technology, Computer Science, Information Security, or a related field (preferred).
- Professional certifications such as CISA, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or equivalent strongly preferred.
- Minimum of 5–7 years of experience in IT risk management, information security, and compliance, ideally within banking or financial services.
- Proven experience owning regulatory compliance topics independently.
- Deep knowledge of regulatory frameworks such as MaRisk, BAIT, DORA, and industry standards such as ISO 27001/27002 and NIST.
- Strong understanding of IT infrastructure, cloud security, application security, and network security.
- Strong strategic and conceptual thinking combined with hands-on execution capability.
- Demonstrated ability to lead complex compliance initiatives independently.
- Advanced risk assessment and control evaluation expertise.
- Strong project and stakeholder management skills across cross-functional environments.
- Experience interacting with regulators and external auditors.
- Proficiency in compliance and risk management tooling.
- Experience with JIRA, Confluence, and FigJam is a plus.
- Excellent written and verbal communication skills.
- Ability to translate complex regulatory requirements into clear business guidance.
- Fluency in English and German are required (spoken and written).
- Strong sense of ownership and accountability.
- Proactive leader with a bias for action.
- Comfortable challenging stakeholders constructively.
- Highly detail-oriented with strong analytical thinking.
- Adaptable and resilient in a fast-changing regulatory environment.
- Continuous improvement mindset.
- High ethical standards and strong commitment to confidentiality and data protection.
- Ability to operate independently while fostering strong collaboration.
What’s in it for you:
- Accelerate your career growth by joining one of Europe’s most talked about disruptors 🚀.
- Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation.
- As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members.
- Additional day of annual leave for each year of service.
- A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, experiences, and backgrounds.
- We work in a hybrid setup, combining in-office collaboration with the flexibility to work from home.
- A relocation package with visa support for those who need it.