In This Role, You Will

• Manage the full lifecycle of ICT risk assessments, from initial risk identification to final remediation monitoring.
• Assist in task prioritization, workload coordination, and ensuring timely delivery of risk assessments.
• Foster a collaborative and open team environment, encouraging knowledge sharing and continuous improvement.
• Act as a point of contact for team-related topics and support escalation handling when needed.
• Support the implementation and execution of the key pillars of Risk Management & Reporting in the field of Information Security.
• Drive the transformation of the company’s ICT Risk Assessment processes to bring them to the highest standards in line with a dynamic environment in constant evolution.
• Execute ICT Risk Assessments and ICT Audits for third-party provided tools and services in an accurate and timely manner.
• Proactively coordinate activities with Third Party Vendors, Product Owners, Security Engineers and within the IRM Segment to perform the aforementioned assessments.
• Provide technical and quality oversight regarding ICT risks, controls and technologies, including ongoing risk assessments, risk decisions, control implementation, evaluation of segregation of duties, and process improvement opportunities.
• Contribute to perform Protection Requirement Analysis to determine the criticality of N26’s information assets and their needs for protection.
• Identify gaps in current frameworks and lead improvement efforts that streamline the team's efficiency.
• Act as a subject matter expert, distilling complex technical risks into clear, actionable essence for leadership.
• Participate in the coaching and training of new hires and junior colleagues, ensuring quality of deliverables.
• Develop KPIs and KRIs that support monitoring of ICT third party risks and reporting to 2nd line.
• 
  

What You Need To Be Successful

• Strong understanding of Information & Communication Technologies (ICT) and the ICT Risk Management domain, as well as audit/compliance frameworks, methodologies and related processes.
• Ability to communicate clearly with peers, as well as stakeholders of all levels from the partner companies.
• Previous experience working in a dynamic environment of a technology-driven business (as e.g. a scaled startup).
• Hands-on experience with cross-functional teams, business operations analysts, security engineers, software engineers, product managers, data analysts, IT audit functions, among other relevant stakeholders, in assessing processes, risks and controls.
• Knowledge and hands-on experience on SOC reports, ISO 27001 certification and other standards or frameworks as a plus (as e.g., PCI DSS).
• Previous experience in the banking sector is a plus, especially understanding of MaRisk and DORA requirements. Experience with Governance, Risk & Compliance (GRC) platforms.
• Strong Sense of Ownership: You are able to inherit a workflow, identify its weaknesses, and independently implement improvements and optimizations on your own initiative.
• Experience with AI tools to improve workflows and efficiency
• 
  
•